mirror of https://github.com/blakeblackshear/frigate.git synced 2026-11-08 22:53:01 +03:00

Files

T

Josh HawkinsandGitHub b55723146d Don't run config ffmpeg as root (#24891 )

* don't run a config ffmpeg.path as root at boot

The frigate and go2rtc run scripts probed "$ffmpeg_path" -version as root before dropping privileges, and resolve_ffmpeg_path only refused runtime-user-writable paths when frigate itself was a root service. In the default mode uid 1000 could set ffmpeg.path to a /config directory, plant bin/ffmpeg there, and get root on the next restart, and under FRIGATE_ROOT_SERVICES=go2rtc a root go2rtc used that path as its ffmpeg bin. The probe now runs as the service user whenever the service drops privileges, and resolve_ffmpeg_path refuses writable paths for whichever service will run the binary, returning the resolved path so a symlink can't be retargeted after the check. go2rtc falls back to the bundled build's libavformat version if its user can't run the custom build.

* resolve the full ffmpeg path under granular root

2026-11-08 07:15:02 -07:00

data

Add Axelera Metis NPU detector plugin v.0.19 (#24270 )

2026-10-20 09:53:28 -05:00

docs

Don't run config ffmpeg as root (#24891 )

2026-11-08 07:15:02 -07:00

plugins

Miscellaneous fixes (#23648 )

2026-07-07 10:56:43 -06:00

scripts

Implement UI for managing multiple models (#24023 )