| Summary: | net-p2p/mldonkey default initscript runs it with root privileges | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | Anatoly <tracer_mipt> |
| Component: | Default Configs | Assignee: | Gentoo Security <security> |
| Status: | RESOLVED INVALID | ||
| Severity: | normal | CC: | tracer_mipt |
| Priority: | High | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
update to initial post:
should be:
MLDONKEY_USER="p2p"
start() {
...
start-stop-daemon --start --chuid $MLDONKEY_USER ...
...
}
my mistake :)
that was for 2.9.0-r1 2.9.0-r2 works just fine |
After default installation of net-p2p/mldonkey it runs as root regardless of settings in config files because of a bug in initscript: currently /etc/init.d/mldonkey looks like: start() { ... start-stop-daemon --start --user $USER ... } should be: start() { ... start-stop-daemon --start --chuid $USER ... }