AWS greengrass documentation change
Summary
Added version 2.17.x to component list; updated requirement from 'must run as root' to 'can run as root' with reference to non-root setup; added release notes for v2.17.0 including installation of Amazon Root CA certificates and non-root user support
Security assessment
The change documents security improvements: running as non-root (privilege reduction) and installing all Amazon Root CA certificates (improved certificate validation). These are security enhancements but not fixes for specific vulnerabilities. The ability to run as non-root is a significant security best practice.
Diff
diff --git a/greengrass/v2/developerguide/greengrass-nucleus-component.md b/greengrass/v2/developerguide/greengrass-nucleus-component.md index b4a508a90..0e8b6b9b4 100644 --- a//greengrass/v2/developerguide/greengrass-nucleus-component.md +++ b//greengrass/v2/developerguide/greengrass-nucleus-component.md @@ -53,0 +54,2 @@ This component has the following versions: + * 2.17.x + @@ -110 +112 @@ Linux - * You must run the AWS IoT Greengrass Core software as a root user. Use `sudo`, for example. + * You can run the AWS IoT Greengrass Core software as a root user. Use `sudo`, for example. You can also run the AWS IoT Greengrass Core software as a non-root user. For more information, see [Set up AWS IoT Greengrass V2 core devices as non-root](./setup-greengrass-non-root.html). @@ -921,0 +924,10 @@ The following table describes the changes in each version of the component. +2.17.0 | + +New features + + + * Installs all Amazon Root CA certificates during auto-provisioning. + * Adds an uninstall lifecycle that runs when a deployment removes a component. + * Allows installing Greengrass Core software as a regular Linux user. + +