Bug 13135

Summary:	/usr/sbin/cannaserver is suid-root: packaging error?
Product:	[Retired] Red Hat Linux	Reporter:	Chris Evans <chris>
Component:	Canna	Assignee:	Nakai <ynakai>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.1	CC:	notting, pbrown
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:	Florence Gold
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2001-08-07 04:59:27 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Chris Evans 2000-06-27 22:41:15 UTC

[Note: No component for Canna, using basesystem]
Full install of BETA2
I seem to have a suid-root (and sgid IIRC) binary here:
/usr/sbin/cannaserver
As far as I can tell, having this binary suid-root serves no useful
purpose. This binary doesn't do anything apart from start the "cannaserver"
daemon. That should be controlled by /etc/rc.d/init.d, _NOT_ arbitrary
users.

Comment 1 Bill Nottingham 2000-07-22 22:07:13 UTC

Fixed in canna-3.5b2-22.

Comment 2 Chris Evans 2001-01-03 01:42:45 UTC

Reopened - in RH7.1 beta1, the binary is setuid to user bin (?!!)

Comment 3 Glen Foster 2001-01-11 21:03:13 UTC

This defect is considered MUST-FIX for Florence Gold release

Comment 4 Bill Nottingham 2001-01-11 21:08:48 UTC

assigning to the Canna owner.h

Comment 5 Eido Inoue 2001-01-26 00:36:02 UTC

Gave Canna it's own uid and gid so it can save user preferences, dics, and cache
area in it's own area.

Comment 6 Bill Nottingham 2001-07-30 20:36:43 UTC

This is broken again in the 7.2 beta. *grumble*

Comment 7 Bill Nottingham 2001-08-07 04:59:23 UTC

Putting on the fairfax must-fix list.

Comment 8 Nakai 2001-08-07 21:35:38 UTC

Fixed in Canna 3.5b2-44