ALT Linux Bugzilla – #17718

klogd-1.4.1-alt28

As https://bugzilla.altlinux.org/show_bug.cgi?id=17250 has shown, an error in the configuration of access permissions can lead to unnoticed failures of klogd: the primary group of the user "klogd" (/etc/passwd) didn't match the group named "klogd" (/etc/group), which was the owner of the working directories for klogd (/var/lib/klogd/...).

The init-script could check whether the actual configuration (/etc/passwd, /etc/group, access permissions) matches the intended configuration. The intended configuration is a known thing: now, it is expressed by the commands in the RPM preinstall script:

# rpm -q klogd --scripts 
preinstall scriptlet (through /bin/sh):
/usr/sbin/groupadd -r -f klogd
/usr/sbin/useradd -r -g klogd -d /dev/null -s /dev/null -n klogd >/dev/null 2>&1 ||:

So, the init script could check that the primary gid of the user "klogd" is indeed the group named "klogd" (and perhaps that /var/lib/klogd/... is indeed owned by the group).