625 2002-02-17 21:32:14 +0300 dictd server runs as a user with no name 2003-08-25 15:18:28 +0400 1 1 4 Development Sisyphus dictd unstable all Linux CLOSED FIXED P4 blocker --- 1 vanyaz alexd cheusov lav oldest_to_newest 596 0 vanyaz 2002-02-17 21:32:14 +0300 There is no user for dictd, and by default the server runs as user with a strange numeric ID: $ ps -A u | fgrep dict #65534 1030 0.0 0.0 5012 4 ? S Feb07 0:00 dictd 1.5.5: 0/0 $ rpm -q dictd dictd-1.5.5-ipl2 I think this is bad, because there is no guarantee that no other service uses the same UID as dictd, and so the systm gets less secure. --- $ sudo service dictd start --- 3292 1 ldv 2002-02-18 13:18:10 +0300 I\'ve raised severity of this PR since the bug is a security policy violation. 6657 2 ldv 2002-02-18 13:18:10 +0300 I\'ve raised severity of this PR since the bug is a security policy violation.