Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 272393 - dev-libs/cyrus-sasl should set saslauthd to run under its own user
Summary: dev-libs/cyrus-sasl should set saslauthd to run under its own user
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal with 1 vote (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords: PATCH
Depends on:
Blocks:
 
Reported: 2009-06-03 09:32 UTC by montjoie
Modified: 2022-02-23 02:29 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
run saslauthd as a non privilegied user (saslauthd_user.patch,1.03 KB, patch)
2010-03-24 14:19 UTC, montjoie 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description montjoie 2009-06-03 09:32:08 UTC 
saslauthd can run as simple user. current installations install/run it as root

Reproducible: Always

Actual Results:  
saslauthd run as root

Expected Results:  
saslauthd run as saslauthd

Add an saslauthd_user parameter in /etc/conf.d/saslauthd
SASLAUTHD_USER="saslauthd"
modify init script from:
start-stop-daemon --start --quiet --exec /usr/sbin/saslauthd
to
start-stop-daemon --start --quiet -c ${SASLAUTHD_USER} --exec /usr/sbin/saslauthd

/etc/saslauthd.conf must be root:saslauthd 640

/var/lib/sasl2 must be root:saslauthd umask 007
Comment 1 Mike Auty (RETIRED) gentoo-dev 2009-06-06 17:55:32 UTC 
Next time, please mention the package you're talking about, rather than just the binary.  Thanks...
Comment 2 montjoie 2009-06-08 07:24:57 UTC 
Sorry, it's dev-libs/cyrus-sasl
Comment 3 montjoie 2010-03-24 14:19:39 UTC 
Created attachment 225107 [details, diff]
run saslauthd as a non privilegied user
Comment 4 montjoie 2011-06-14 08:40:45 UTC 
saslauthd works now for years under saslauth user.