bugutil-vserver - Bugs: bug #15996, suexec from root with an invalid...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #15996: suexec from root with an invalid ID runs as root

Submitter:  John Muller <bgodot>
Submitted:  Sun 05 Mar 2006 02:42:28 AM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  daniel_hozac
Open/Closed:  Closed Component Version:  stable
Release:  0.30.209

(-)Discussion

Sun 17 Sep 2006 10:42:20 PM UTC, comment #1: 

Thanks, this should be fixed in SVN.

Daniel Hokka Zakrisson <daniel_hozac>
Group Member
Sun 05 Mar 2006 02:42:28 AM UTC, original submission:  

I tried to use "vserver [servername] suexec [username] [command]" in my startup scripts, but instead of running as the user I expected, the process ran as root within the vserver.

I learned that suexec takes a userid Number, instead of a username String. Since the usual result of pushing alphabetical characters through a convert-to-number function is 0, which is the userid of root...

Invalid parameters should al least return an error, not run with extra priviledges. =)

John Muller <bgodot>

 

(-)Attached Files

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

(-)Dependencies

Depends on the following items: None found

Items that depend on this one: None found

 

(+)Mail Notification Carbon-Copy List

(+)Votes

(+)History

Back to the top

Powered by Savane 3.14-ee00.
Corresponding source code