Re: World writable pid and lock files.
On 05/11/11 01:37, helpermn wrote:
> On Tue, 10 May 2011, Henrique de Moraes Holschuh <email@example.com> wrote:
>> On Tue, 10 May 2011, helpermn wrote:
>>> I imagine why files listed below have 666 file mode bits set:
>> You could get the initscripts to send signals to any PID you want, so
>> yes, it is a nasty security issue.
It should be mandatory for initscripts to verify the pid is indeed an
instance of there daemon.
...as well as correcting the world writable bit.
> So what is a solution? Could I/you/someone report this somewhere?
> Maybe Debian bugs tracker?