$OpenBSD: patch-conf_icecast_xml_in,v 1.7 2014/05/28 13:37:25 gonzalo Exp $
--- conf/icecast.xml.in.orig	Sun Jan  6 07:28:44 2013
+++ conf/icecast.xml.in	Tue May 27 13:15:37 2014
@@ -59,7 +59,7 @@
     <!-- You may have multiple <listener> elements -->
     <listen-socket>
         <port>8000</port>
-        <!-- <bind-address>127.0.0.1</bind-address> -->
+        <bind-address>127.0.0.1</bind-address>
         <!-- <shoutcast-mount>/stream</shoutcast-mount> -->
     </listen-socket>
     <!--
@@ -133,14 +133,14 @@
 
     <paths>
 		<!-- basedir is only used if chroot is enabled -->
-        <basedir>@pkgdatadir@</basedir>
+        <basedir>/var/icecast</basedir>
 
         <!-- Note that if <chroot> is turned on below, these paths must both
              be relative to the new root, not the original root -->
-        <logdir>@localstatedir@/log/@PACKAGE@</logdir>
-        <webroot>@pkgdatadir@/web</webroot>
-        <adminroot>@pkgdatadir@/admin</adminroot>
-        <!-- <pidfile>@pkgdatadir@/icecast.pid</pidfile> -->
+        <logdir>/log</logdir>
+        <webroot>/web</webroot>
+        <adminroot>/admin</adminroot>
+        <!-- <pidfile>@localstatedir@/run/icecast.pid</pidfile> -->
 
         <!-- Aliases: treat requests for 'source' path as being for 'dest' path
              May be made specific to a port or bound address using the "port"
@@ -171,12 +171,10 @@
     </logging>
 
     <security>
-        <chroot>0</chroot>
-        <!--
+        <chroot>1</chroot>  
         <changeowner>
-            <user>nobody</user>
-            <group>nogroup</group>
+            <user>_icecast</user>
+            <group>_icecast</group>
         </changeowner>
-        -->
     </security>
 </icecast>
