2f8dfd1
diff -up ./client/cjdroute2.c.genconf ./client/cjdroute2.c
e8d4b4b
--- ./client/cjdroute2.c.genconf	2020-06-23 08:37:44.000000000 -0400
e8d4b4b
+++ ./client/cjdroute2.c	2020-07-01 13:48:09.041257042 -0400
e8d4b4b
@@ -359,7 +359,7 @@ static int genconf(struct Allocator* all
e8d4b4b
            if (Defined(android) || Defined(darwin)) {
e8d4b4b
     printf("        { \"setuser\": 0 },\n");
e8d4b4b
            } else {
e8d4b4b
-    printf("        { \"setuser\": \"nobody\", \"keepNetAdmin\": 1 },\n");
e8d4b4b
+    printf("        { \"setuser\": \"cjdns\", \"keepNetAdmin\": 1 },\n");
e8d4b4b
            }
e8d4b4b
     printf("\n"
2f8dfd1
            "        // Chroot changes the filesystem root directory which cjdns sees, blocking it\n"
e8d4b4b
@@ -372,7 +372,7 @@ static int genconf(struct Allocator* all
2f8dfd1
           }
2f8dfd1
           else {
2f8dfd1
     printf("        // Default: enabled (using \"/var/run\")\n"
2f8dfd1
-           "        { \"chroot\": \"/var/run/\" },\n");
2f8dfd1
+           "        { \"chroot\": \"/var/empty/cjdns\" },\n");
2f8dfd1
           }
2f8dfd1
     printf("\n"
2f8dfd1
            "        // Nofiles is a deprecated security feature which prevents cjdns from opening\n"