bugutil-vserver - Bugs: bug #15996, suexec from root with an invalid...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #15996: suexec from root with an invalid ID runs as root

Submitter:  John Muller <bgodot>
Submitted:  Sun 05 Mar 2006 02:42:28 AM UTC
   
 
Category:  None Severity:  3 - Normal
Priority:  5 - Normal Item Group:  None
Status:  Fixed Privacy:  Public
Assigned to:  daniel_hozac Open/Closed:  Closed
Component Version:  stable Release:  0.30.209

Discussion

Sun 17 Sep 2006 10:42:20 PM UTC, comment #1: 

Thanks, this should be fixed in SVN.

Daniel Hokka Zakrisson <daniel_hozac>
Group Member
Sun 05 Mar 2006 02:42:28 AM UTC, original submission:  

I tried to use "vserver [servername] suexec [username] [command]" in my startup scripts, but instead of running as the user I expected, the process ran as root within the vserver.

I learned that suexec takes a userid Number, instead of a username String. Since the usual result of pushing alphabetical characters through a convert-to-number function is 0, which is the userid of root...

Invalid parameters should al least return an error, not run with extra priviledges. =)

John Muller <bgodot>

 

Attached Files

This item currently has no attached files.

 

Dependencies

This item does not depend on any other items.

No items depend on this one.

 

Mail Notification Carbon-Copy List

 

Votes

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

History

Follow 3 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-09-17 daniel_hozac StatusNone Fixed
    Assigned toNone daniel_hozac
    Open/ClosedOpen Closed

Back to the top

Powered by Savane 3.16.
Corresponding source code