Bug 1122012

Summary: SHM refclock allows only two units with owner-only access
Product: Red Hat Enterprise Linux 7 Reporter: Miroslav Lichvar <mlichvar>
Component: ntpAssignee: Miroslav Lichvar <mlichvar>
Status: CLOSED ERRATA QA Contact: Jakub Prokes <jprokes>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: ccui, jprokes, jscotka, ovasik
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ntp-4.2.6p5-20.el7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1122015 (view as bug list) Environment:
Last Closed: 2015-11-19 08:37:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1122015, 1191019    

Description Miroslav Lichvar 2014-07-22 11:07:33 UTC
Description of problem:
Currently, the permissions of the shared memory segment created by the SHM refclock are set from the unit number. Units 0 and 1 are created with owner-only access, units 2 and above have world access. This is a problem in applications where more units than two are needed and world access would be a security problem.

Upstream bug report with a patch:
http://bugs.ntp.org/show_bug.cgi?id=2627

Version-Release number of selected component (if applicable):
4.2.6p5-18

How reproducible:
Always

Steps to Reproduce:
1. add "server 127.127.28.2" to ntp.conf
2. restart ntpd
3. run ipcs
4. check permission of the memory segment with key 0x4e545032

Actual results:
666

Expected results:
600

Additional info:

Comment 6 errata-xmlrpc 2015-11-19 08:37:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-2231.html