[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#55450: bitlbee running as root
From: |
Ludovic Courtès |
Subject: |
bug#55450: bitlbee running as root |
Date: |
Mon, 16 May 2022 15:30:18 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) |
Starting from commit 211fe3f66e6dfdaa64974931c458ab1d92afc182, if PID 1
is Shepherd 0.9.0, the bitlbee daemon was started on-demand as an inetd
service.
However, due to a logic bug, it was running as root (in a separate user
namespace though) instead of running as “bitlbee”. The bug is that we
were spawning “bitlbee -u bitlbee” as root; normally, bitlbee would
setuid to the “bitlbee” user early on, but since it was in a separate
namespace and with a minimal /etc/passwd, it couldn’t do anything and
kept the current UID (that UID was 1000 inside the user namespace, but 0
outside).
Fix coming soon…
Ludo’.
- bug#55450: bitlbee running as root,
Ludovic Courtès <=