578978 – app-admin/logstash-bin-2.3.0 changes default user account without warning

Bug 578978 - app-admin/logstash-bin-2.3.0 changes default user account without warning

Summary: app-admin/logstash-bin-2.3.0 changes default user account without warning

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Tomáš Mózes

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2016-04-04 05:47 UTC by Karl-Johan Karlsson
Modified:	2016-04-12 08:13 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Karl-Johan Karlsson 2016-04-04 05:47:11 UTC

In app-admin/logstash-bin-2.2.0, Gentoo's init script ran Logstash as root by default:

/usr/portage/app-admin/logstash-bin/files/logstash.initd:

   LS_USER="${LS_USER:-root}"
   LS_GROUP="${LS_GROUP:-root}"

In app-admin/logstash-bin-2.3.0, Logstash runs as its own user:

/usr/portage/app-admin/logstash-bin/files/logstash.initd-r1:

   LS_USER=${LS_USER:-logstash}
   LS_GROUP=${LS_GROUP:-$LS_USER}

This is significant if you've configured Logstash to read any files, e.g. syslog files which are only readable by root by default.

While the problem was easy to spot and fix, it would have been nice to be warned of such a significant change by e.g. an einfo message in pkg_postinst.

Comment 1 Karl-Johan Karlsson 2016-04-05 05:10:07 UTC

It looks like this bug affects app-admin/logstash-bin-2.2.2-r1 as well, but I haven't tested that version.

Comment 2 Tomáš Mózes 2016-04-12 08:13:50 UTC

Fixed in https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5a4564496604d80cdffd7eccdb00e80ded5fe840

Thanks for reporting, if you have any comments, feel free to re-open.