Bug 147743

Summary: CAN-2005-2496 improper group set when running ntpd
Product: [Fedora] Fedora Reporter: Josh Bressers <bressers>
Component: ntpAssignee: Petr Raszyk <praszyk>
Status: CLOSED ERRATA QA Contact: Brian Brock <bbrock>
Severity: low Docs Contact:
Priority: medium    
Version: 3CC: jnovy, security-response-team, sundaram
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: impact=low,reported=20050210,public=20050825,source=vendorsec
Fixed In Version: 4.2.0.a.20050816 Rel.1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-09-05 07:49:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Fix for this issue. none

Description Josh Bressers 2005-02-10 21:48:05 UTC
When starting xntpd with the -u option and specifying the group
by using a string not a numeric gid the daemon uses the gid of
the user not the group.

reproduce:
        # rcxntpd start
        # ps -C ntpd -o comm,pid,ruser,euser,rgroup,egroup
        verify given and real IDs


This issue affects the ntpd we ship with FC

Comment 1 Josh Bressers 2005-02-10 21:48:06 UTC
Created attachment 110943 [details]
Fix for this issue.

Comment 2 Josh Bressers 2005-08-25 15:30:14 UTC
Lifting embargo

Comment 3 Rahul Sundaram 2005-09-05 07:38:47 UTC
has this been fixed now?

Comment 4 Mark J. Cox 2005-09-05 07:49:49 UTC
FEDORA-2005-812

Comment 5 Petr Raszyk 2005-09-15 10:39:32 UTC
Fixed (by jryska)  on Thu Apr 14 2005 
with help (bressers) in:
devel, FC-4, FC-3, RHEL-4.
  	
RHEL-3 does not call 'getgrnam()'.



I checked only (int sw_gid - initialization/setting):


Comment 6 Jindrich Novy 2005-09-15 11:25:43 UTC
An update for FC3 was released so ERRATA is the proper resolution here as this
bug is filed for FC3.

For more information see:
http://lwn.net/Articles/149403/