Bug 541464

Summary: Run sphinx searchd as non-root user
Product: [Fedora] Fedora Reporter: Jonas Courteau <jonas.courteau>
Component: sphinxAssignee: Allisson Azevedo <allisson>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: allisson
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: sphinx-0.9.9-1.fc12 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-03-02 00:55:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Proposed patch to the spec file and init script none

Description Jonas Courteau 2009-11-25 23:56:30 UTC 
Description of problem:
Ideally searchd and the various index utilities should not be running as root - they don't specifically need root access.  Unfortunately searchd doesn't drop privileges, so any privilege changes need to be done via runuser.

Version-Release number of selected component (if applicable):


How reproducible: N/A - feature request


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Attached are patches to the spec and to the init script adding the appropriate code to create the user on install, remove it on uninstall, and setting the appropriate permissions everywhere.

Note that I'm not sure the process to add a username to the list at https://fedoraproject.org/wiki/PackageUserRegistry so I used user number 51 in the script.  If there's a process that I should do to get that added, I'd be happy to do it.
Comment 1 Jonas Courteau 2009-11-25 23:57:29 UTC 
Created attachment 373882 [details]
Proposed patch to the spec file and init script
Comment 2 Fedora Update System 2010-02-11 13:54:29 UTC 
sphinx-0.9.9-1.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/sphinx-0.9.9-1.fc12
Comment 3 Fedora Update System 2010-02-11 13:54:38 UTC 
sphinx-0.9.9-1.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/sphinx-0.9.9-1.fc11
Comment 4 Fedora Update System 2010-02-12 04:45:08 UTC 
sphinx-0.9.9-1.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update sphinx'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2010-1792
Comment 5 Fedora Update System 2010-02-12 04:49:34 UTC 
sphinx-0.9.9-1.fc11 has been pushed to the Fedora 11 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update sphinx'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2010-1814
Comment 6 Fedora Update System 2010-03-02 00:55:13 UTC 
sphinx-0.9.9-1.fc11 has been pushed to the Fedora 11 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 7 Fedora Update System 2010-03-02 01:04:04 UTC 
sphinx-0.9.9-1.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.