provide uid/gid settings in config file

[openwrtledediy]

Hi, dear developpers
I would assume current gid value of adguardhome on openwrt is gid=0.
Could you make an option or change the default gid to a new one, so the iptables can operate based on the gid?
Thanks.

[openwrtledediy]

This was discussed 5 years ago, but for dnsmasq.
FYI
https://openwrt-devel.openwrt.narkive.com/sazTnNOJ/patch-rfc-dnsmasq-run-as-dedicated-uid-gid

For example, I would like to forward most traffice to a VPN connection, but leave DNS traffic excluded.(return gid=xxxx aka adguadhome in iptables)

[ameshkov]

Well, we don't maintain an openwrt package. If you're using one, I guess you need to address this question to it's author.

[openwrtledediy]

ok then.
Maybe add gid/uid setting in configuration files like dnsmasq? At lease provide an option for this situation.
Thanks.

#If you want dnsmasq to change uid and gid to something other than the default, edit the following lines.
#user=
#group=

in

https://thekelleys.org.uk/dnsmasq/docs/dnsmasq.conf.example

[ameshkov]

It seems dnsmasq itself decides under which user it works, AGH is different, it does not do this and it will work under the same user that started the process. So you just need to edit the openwrt service file and make sure it is started under the user you need.

[ainar-g]

Just fyi, Go only started properly supporting setuid and setgid on Linux in Go 1.16, to which we plan to switch in the v0.107 cycle. So we won't really be able to do anything with those syscalls until that milestone.

[openwrtledediy]

Just fyi, Go only started properly supporting setuid and setgid on Linux in Go 1.16, to which we plan to switch in the v0.107 cycle. So we won't really be able to do anything with those syscalls until that milestone.

Thanks for your information.
Would you add this function via config file or even better (with drop down list read from /etc/passwd)?

[ainar-g]

The details are currently unclear, sorry. We'll need to take care of the current and the next cycle first.

[openwrtledediy]

The details are currently unclear, sorry. We'll need to take care of the current and the next cycle first.

Sure, just take it in mind, it's not critical to the current build. I'm happy what adguardhome can do now.
Thank you adguardhome team.

[ameshkov]

@ainar-g will you transform this issue into enhancement or a feature request then?

[ainar-g]

This is implemented as of snapshot 48c44c2. Can you please check if our solution works for you?

[ainar-g]

We'll close this issue for now. Please file new ones if you encounter any issues. Thanks.