I use Microsoft Silverlight for watching Netflix. This runs via Pipelight (https://launchpad.net/pipelight).
Whenever I launch Gufw, it in turn makes calls to silverlight. Since Gufw is running as root, this means that Silverlight is launched as root (which makes me extremely nervous).
Why is this?
Here is the terminal output when running gufw:
$ gufw
[PIPELIGHT:LIN:unknown] attached to process.
[PIPELIGHT:LIN:unknown] checking environment variable PIPELIGHT_SILVERLIGHT5_1_CONFIG.
[PIPELIGHT:LIN:unknown] searching for config file pipelight-silverlight5.1.
[PIPELIGHT:LIN:unknown] trying to load config file from '/root/.config/pipelight-silverlight5.1'.
[PIPELIGHT:LIN:unknown] trying to load config file from '/etc/pipelight-silverlight5.1'.
[PIPELIGHT:LIN:unknown] trying to load config file from '/usr/share/pipelight/configs/pipelight-silverlight5.1'.
[PIPELIGHT:LIN:unknown] sandbox not found or not installed!
[PIPELIGHT:LIN:silverlight5.1] using wine prefix directory /root/.wine-pipelight.
[PIPELIGHT:LIN:silverlight5.1] checking plugin installation - this might take some time.
[PIPELIGHT:LIN:silverlight5.1] -------------------------------------------------------
[PIPELIGHT:LIN:silverlight5.1] WARNING! YOU ARE RUNNING THIS PIPELIGHT PLUGIN AS ROOT!
[PIPELIGHT:LIN:silverlight5.1] THIS IS USUALLY NOT A GOOD IDEA! YOU HAVE BEEN WARNED!
[PIPELIGHT:LIN:silverlight5.1] -------------------------------------------------------
[install-dependency] wine-silverlight5.1-installer is already installed in '/root/.wine-pipelight'.
[install-dependency] wine-mpg2splt-installer is already installed in '/root/.wine-pipelight'.
[PIPELIGHT:LIN:silverlight5.1] -------------------------------------------------------
[PIPELIGHT:LIN:silverlight5.1] WARNING! YOU ARE RUNNING THIS PIPELIGHT PLUGIN AS ROOT!
[PIPELIGHT:LIN:silverlight5.1] THIS IS USUALLY NOT A GOOD IDEA! YOU HAVE BEEN WARNED!
[PIPELIGHT:LIN:silverlight5.1] -------------------------------------------------------
wine: cannot find L"C:\\windows\\system32\\winemenubuilder.exe"
err:wineboot:ProcessRunKeys Error running cmd L"C:\\windows\\system32\\winemenubuilder.exe -a -r" (2)
[PIPELIGHT:WIN:silverlight5.1] embedded mode is on.
[PIPELIGHT:WIN:silverlight5.1] windowless mode is off.
[PIPELIGHT:WIN:silverlight5.1] linux windowless mode is off.
[PIPELIGHT:WIN:silverlight5.1] force SetWindow is off.
[PIPELIGHT:WIN:silverlight5.1] window class hook is on.
[PIPELIGHT:WIN:silverlight5.1] strict draw ordering is off.
[PIPELIGHT:WIN:silverlight5.1] replaced API function CreateWindowExA.
[PIPELIGHT:WIN:silverlight5.1] replaced API function CreateWindowExW.
[PIPELIGHT:WIN:silverlight5.1] replaced API function TrackPopupMenuEx.
[PIPELIGHT:WIN:silverlight5.1] replaced API function TrackPopupMenu.
fixme:advapi:RegisterTraceGuidsW (0x7022a7, 0x7a0120, {aa087e0e-0b35-4e28-8f3a-440c3f51eef1}, 1, 0x68f678, (null), (null), 0x7a0120): stub
[PIPELIGHT:WIN:silverlight5.1] init successful!
[PIPELIGHT:WIN:silverlight5.1] OpenGL Vendor: Intel Open Source Technology Center
[PIPELIGHT:WIN:silverlight5.1] OpenGL Renderer: Mesa DRI Mobile Intel® GM45 Express Chipset x86/MMX/SSE2
[PIPELIGHT:WIN:silverlight5.1] Your GPU is in the whitelist, hardware acceleration should work.
[PIPELIGHT:LIN:silverlight5.1] using thread asynccall event handling.
java version "1.7.0_55"
OpenJDK Runtime Environment (IcedTea 2.4.7) (7u55-2.4.7-1ubuntu1)
OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)