Bug 13135 - /usr/sbin/cannaserver is suid-root: packaging error?
Summary: /usr/sbin/cannaserver is suid-root: packaging error?
Status: CLOSED RAWHIDE
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: Canna
Version: 7.1
Hardware: i386
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nakai
QA Contact:
URL:
Whiteboard: Florence Gold
Keywords: Security
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2000-06-27 22:41 UTC by Chris Evans
Modified: 2008-05-01 15:37 UTC (History)
2 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2001-08-07 04:59:27 UTC


Attachments (Terms of Use)

Description Chris Evans 2000-06-27 22:41:15 UTC
[Note: No component for Canna, using basesystem]
Full install of BETA2
I seem to have a suid-root (and sgid IIRC) binary here:
/usr/sbin/cannaserver
As far as I can tell, having this binary suid-root serves no useful
purpose. This binary doesn't do anything apart from start the "cannaserver"
daemon. That should be controlled by /etc/rc.d/init.d, _NOT_ arbitrary
users.

Comment 1 Bill Nottingham 2000-07-22 22:07:13 UTC
Fixed in canna-3.5b2-22.

Comment 2 Chris Evans 2001-01-03 01:42:45 UTC
Reopened - in RH7.1 beta1, the binary is setuid to user bin (?!!)

Comment 3 Glen Foster 2001-01-11 21:03:13 UTC
This defect is considered MUST-FIX for Florence Gold release

Comment 4 Bill Nottingham 2001-01-11 21:08:48 UTC
assigning to the Canna owner.h

Comment 5 Eido Inoue 2001-01-26 00:36:02 UTC
Gave Canna it's own uid and gid so it can save user preferences, dics, and cache
area in it's own area.


Comment 6 Bill Nottingham 2001-07-30 20:36:43 UTC
This is broken again in the 7.2 beta. *grumble*

Comment 7 Bill Nottingham 2001-08-07 04:59:23 UTC
Putting on the fairfax must-fix list.

Comment 8 Nakai 2001-08-07 21:35:38 UTC
Fixed in Canna 3.5b2-44


Note You need to log in before you can comment on or make changes to this bug.