Skip to content

Disable allow_superuser by default #16355

Description

@robbavey

In #14046 and #14089, we introduced new functionality to guard against running Logstash as root with the introduction of a new setting allow_superuser. The initial implementation set this to true to avoid a breaking change in a minor release, but we should set this setting to false by default to disallow running Logstash as root by default

### Tasks
- [x] on `main` (8.x), when `allow_superuser` is not set, log a deprecation advising how to resolve prior to upgrading to 9.x by _either_ (1) setting `allow_superuser: false` to opt in _or_ (2) setting `allow_superuser: true` to opt out
- [x] on `9.x`, set default value of `allow_superuser` to `false`

Activity

  1. flexitrev commented on Aug 12, 2024

    @flexitrev

    Double check description here, was initial implementation set to true?

  2. robbavey commented on Aug 12, 2024

    @robbavey
    MemberAuthor

    Yes it was

  3. self-assigned this
    on Oct 14, 2024
  4. robbavey commented on Nov 8, 2024

    @robbavey
    MemberAuthor

    Closed as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions