Bug 625 - dictd server runs as a user with no name
Summary: dictd server runs as a user with no name
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: dictd (show other bugs)
Version: unstable
Hardware: all Linux
: P4 blocker
Assignee: Alexey Dyachenko
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-02-17 21:32 MSK by imz
Modified: 2003-08-25 15:18 MSD (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description imz 2002-02-17 21:32:14 MSK 
There is no user for dictd, and by default the server runs as
user with a strange numeric ID:

$ ps -A u | fgrep dict
#65534    1030  0.0  0.0  5012    4 ?        S    Feb07   0:00 dictd 1.5.5: 0/0
$ rpm -q dictd
dictd-1.5.5-ipl2

I think this is bad, because there is no guarantee that no other service uses the same UID as dictd, and so the systm gets less secure.

---
$ sudo service dictd start

---
Comment 1 Dmitry V. Levin 2002-02-18 13:18:10 MSK 
I\'ve raised severity of this PR since the bug is a security policy violation.
Comment 2 Dmitry V. Levin 2002-02-18 13:18:10 MSK 
I\'ve raised severity of this PR since the bug is a security policy violation.