bugutil-vserver - Bugs: bug #15996, suexec from root with an invalid...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #15996: suexec from root with an invalid ID runs as root

Submitter:  John Muller <bgodot>
Submitted:  Sun 05 Mar 2006 02:42:28 AM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  daniel_hozac
Open/Closed:  Closed Component Version:  stable
Release:  0.30.209

Sun 17 Sep 2006 10:42:20 PM UTC, comment #1: 

Thanks, this should be fixed in SVN.

Daniel Hokka Zakrisson <daniel_hozac>
Group Member
Sun 05 Mar 2006 02:42:28 AM UTC, original submission:  

I tried to use "vserver [servername] suexec [username] [command]" in my startup scripts, but instead of running as the user I expected, the process ran as root within the vserver.

I learned that suexec takes a userid Number, instead of a username String. Since the usual result of pushing alphabetical characters through a convert-to-number function is 0, which is the userid of root...

Invalid parameters should al least return an error, not run with extra priviledges. =)

John Muller <bgodot>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 3 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-09-17 daniel_hozac StatusNone Fixed
    Assigned toNone daniel_hozac
    Open/ClosedOpen Closed

Back to the top

Powered by Savane 3.13-4448.
Corresponding source code