bugutil-vserver - Bugs: bug #15996, suexec from root with an invalid...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #15996: suexec from root with an invalid ID runs as root

Submitted by:  John Muller <bgodot>
Submitted on:  Sun 05 Mar 2006 02:42:28 AM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Daniel Hokka Zakrisson <daniel_hozac>
Open/Closed: ClosedComponent Version: stable
Release: 0.30.209

Sun 17 Sep 2006 10:42:20 PM UTC, comment #1:

Thanks, this should be fixed in SVN.

Daniel Hokka Zakrisson <daniel_hozac>
Project MemberIn charge of this item.
Sun 05 Mar 2006 02:42:28 AM UTC, original submission:

I tried to use "vserver [servername] suexec [username] [command]" in my startup scripts, but instead of running as the user I expected, the process ran as root within the vserver.

I learned that suexec takes a userid Number, instead of a username String. Since the usual result of pushing alphabetical characters through a convert-to-number function is 0, which is the userid of root...

Invalid parameters should al least return an error, not run with extra priviledges. =)

John Muller <bgodot>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 3 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Sun 17 Sep 2006 10:42:20 PM UTCdaniel_hozacStatusNone=>Fixed
  Assigned toNone=>daniel_hozac
  Open/ClosedOpen=>Closed

Back to the top


Powered by Savane 3.1-cleanup1