[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#641539: policyd-weight: wrong ownership for socket (fix included)

Package: policyd-weight
Severity: normal
Tags: upstream

The socket using to communicate with the cache is chown-ed to
the wrong group, preventing successfull debug sessions talking to
an already existing cache. (Probably even preventing non-debug session
from talking to the existing cache too, but this I didn't check.)

Around line 2922 

2922     if(!( $( = getpwnam($USER) ))
2923     {
2924         mylog(warning=>"cache: couldn't change GID to user $GROUP: $!");
2925     }
2926     create_lockpath('cache');

It should be

2922     if(!( $( = getgrnam($GROUP) ))

As long as the UID of the used user (polw) is the same as the GID, this
bug doesn't matter. But since the polw user gets created during package installation
nobody can't gurantee the GID == UID.

-- System Information:
Debian Release: 6.0.2
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages policyd-weight depends on:
ii  adduser                3.112+nmu2        add and remove users and groups
ii  libnet-dns-perl        0.66-2            Perform DNS queries from a Perl sc
ii  libnet-ip-perl         1.25-2            Perl extension for manipulating IP
ii  perl                   5.10.1-17squeeze2 Larry Wall's Practical Extraction 

Versions of packages policyd-weight recommends:
ii  perl [libsys-syslog-pe 5.10.1-17squeeze2 Larry Wall's Practical Extraction 

policyd-weight suggests no packages.

-- no debconf information

Reply to: