Bug 625 - dictd server runs as a user with no name
: dictd server runs as a user with no name
Status: CLOSED FIXED
: Sisyphus
(All bugs in Sisyphus/dictd)
: unstable
: all Linux
: P4 blocker
Assigned To:
:
:
:
:
:
  Show dependency tree
 
Reported: 2002-02-17 21:32 by
Modified: 2003-08-25 15:18 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2002-02-17 21:32:14
There is no user for dictd, and by default the server runs as
user with a strange numeric ID:

$ ps -A u | fgrep dict
#65534    1030  0.0  0.0  5012    4 ?        S    Feb07   0:00 dictd 1.5.5: 0/0
$ rpm -q dictd
dictd-1.5.5-ipl2

I think this is bad, because there is no guarantee that no other service uses the same UID as dictd, and so the systm gets less secure.

---
$ sudo service dictd start

---

------- Comment #1 From 2002-02-18 13:18:10 -------
I\'ve raised severity of this PR since the bug is a security policy violation.
------- Comment #2 From 2002-02-18 13:18:10 -------
I\'ve raised severity of this PR since the bug is a security policy violation.