TLDR: The group assignment fix in Mojolicious 5.53 did not work out, and you should now be using Mojolicious::Plugin::SetUserGroup.
Yesterday we've been made aware that the user/group assignment feature of all our built-in web servers was still not working correctly. This is not very surprising, considering the lack of tests, but unacceptable for what was supposed to be a security feature. So we've decided to remove it from the Mojolicious core distribution. https://github.com/kraih/mojo/commit/1ddab066d4b77acea2c13dc06f35d90fede31538 There are multiple alternatives available. 1. Mojolicious::Plugin::SetUserGroup https://metacpan.org/pod/Mojolicious::Plugin::SetUserGroup 2. Using a reverse proxy http://mojolicio.us/perldoc/Mojolicious/Guides/Cookbook#Nginx 3. iptables port forwarding 4. Linux capabilities While there is a possibility that this feature will return in a future version, we will first have to make sure that it is absolutely rock solid and 100% tested, which is not easy. -- sebastian -- You received this message because you are subscribed to the Google Groups "Mojolicious" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/mojolicious. For more options, visit https://groups.google.com/d/optout.
