> Which grants root to any user with a numeral This formulation may be misunderstood. The bug did not grant users root rights, it ignored the user= setting on

> Which grants root to any user with a numeral This formulation may be misunderstood. The bug did not grant users root rights, it ignored the user= setting on a service if the service was intended to run as a user stating with a numeral. So you already needed to be root to create a service. The bug allows a service to run with more permissions than intended though.