Questions about cache_effective_group

[odunybrad]

Thanks for providing this useful container.

I have a question about one squid config: cache_effective_group.
It seems the official document says "This option is not recommended by the Squid Team. Our preference is for administrators to configure a secure user account for squid with UID/GID matching system policies."

However, in your squid.conf, you manually set cache_effective_group to proxy.

Shall we change the setting?
Thanks!

[mariocesar]

Hi ! thanks for the tip.

the proxy user is created within the container, it looks safe to use it that way, as the container users are solely used for squid. The main idea of having squid in a container is adding that layer of security.

We could create special users inside the container to run the process, but I'm not sure will add security.

What are your thoughts?