[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: exploring debian's users and groups



On Mon, Aug 06, 2001 at 11:11:18PM -0700, Daniel Jacobowitz wrote:
> > irc:
> > 
> > 	HELP: Why does an irc daemon need its own static user and group?
> 
> Because no one wants to trust it? :)
> 
> It doesn't.  Of course, removnig them is tricky.

This is a bug in ircd. It setuid()s itself to a given UID on startup,
if started as root, but doesn't know how to look up a name to get that
UID - the UID is actually set at compile time.

It does not need a uid. The correct solution is to #undef IRC_UID in
config.h, which will cause it to error and exit if started as root. It
should then be started from an init.d script that runs it as a
suitable user, which then need not be static.

-- 
Andrew Suffield <asuffield@users.sourceforge.net>
Dept. of Computing, Imperial College, London, UK

Attachment: pgpIuHVg6y93t.pgp
Description: PGP signature


Reply to: