[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#405173: runs as group root



Package: mldonkey-server
Version: 2.8.2-1
Severity: important
Tags: patch


I found, that files the mldonkey server downloaded, belonged
to the "root" group. /proc/pid/status of the mlnet process
showed it running with group id 0. That looks suspicious to
me. below patch to make it chuid mldonkey on startup. still
works for me.

p

--- mldonkey-server-stock
+++ mldonkey-server
@@ -52,6 +52,10 @@
 WRAPPER_OPTIONS=""
 
 # Set configuration value, from CONFIG
+if [ -n "$MLDONKEY_USER" ] && [ -n "$MLDONKEY_GROUP" ]; then
+    WRAPPER_OPTIONS="$WRAPPER_OPTIONS --chuid $MLDONKEY_USER:$MLDONKEY_GROUP"
+fi
+
 if [ -n "$MLDONKEY_DIR" ]; then
   WRAPPER_OPTIONS="$WRAPPER_OPTIONS --chdir $MLDONKEY_DIR"
 fi


-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.19
Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8)

Versions of packages mldonkey-server depends on:
ii  adduser                   3.101          Add and remove users and groups
ii  debconf [debconf-2.0]     1.5.11         Debian configuration management sy
ii  dpkg                      1.13.24        package maintenance system for Deb
ii  libbz2-1.0                1.0.3-6        high-quality block-sorting file co
ii  libc6                     2.3.6.ds1-9    GNU C Library: Shared libraries
ii  libgcc1                   1:4.1.1-21     GCC support library
ii  libgd2-xpm                2.0.33-5.2     GD Graphics Library version 2
ii  libpng12-0                1.2.15~beta5-1 PNG library - runtime
ii  libstdc++6                4.1.1-21       The GNU Standard C++ Library v3
ii  mime-support              3.39-1         MIME files 'mime.types' & 'mailcap
ii  ucf                       2.0017         Update Configuration File: preserv
ii  zlib1g                    1:1.2.3-13     compression library - runtime

mldonkey-server recommends no packages.

-- debconf information:
* mldonkey-server/max_hard_download_rate: 20
* mldonkey-server/launch_at_startup: true
  mldonkey-server/config_exist_no_options:
* mldonkey-server/max_alive: 24
* mldonkey-server/run_as_user: mldonkey
* mldonkey-server/plugin: Overnet, Bittorent
* mldonkey-server/reown_file: true
* mldonkey-server/mldonkey_group: mldonkey
* mldonkey-server/mldonkey_niceness: 20
  mldonkey-server/config_exist_no_dir:
  mldonkey-server/false_password:
* mldonkey-server/fasttrack_problem:
  mldonkey-server/shared_directories: share
* mldonkey-server/mldonkey_dir: /home/mldonkey
* mldonkey-server/restart_after_upgrade: false
* mldonkey-server/client_name: mteqtn
  mldonkey-server/mldonkey_move: false
* mldonkey-server/max_hard_upload_rate: 5
* mldonkey-server/mldonkey_umask: 0022



Reply to: