mirror of https://github.com/OpenVidu/openvidu.git
815d42d211
- The pull-through cache for private Media Nodes ran as root with no sandboxing. It now runs as a transient systemd user (DynamicUser) with no capabilities: it can only write its own cache (StateDirectory, /var/lib/registry-mirror), and systemd restricts its kernel, device, namespace, address family and syscall access. TCP 5555 needs no privileges. - registry_mirror.sh no longer creates the cache directory: systemd creates it with the right owner. Assisted-by: claude-code - Anthropic - Claude Opus 5.5 |
||
|---|---|---|
| .. | ||
| elastic | ||
| ha | ||
| local-meet | ||
| shared | ||
| singlenode | ||