Red Hat Bugzilla – Bug 14937
BETA5 full install: runs "amandaidx" server by default!
Last modified: 2008-05-01 11:37:57 EDT
This violates the policy of trying not to expand upon what RH6.2 listens on
by default :-)
Also note that
1) This service runs as user operator, group disk. Group disk has write
access to all the block devices and as such is equivalent to root. Hmm, a
relatively unaudited daemon running as root..? :-)
2) The service as shipped in BETA5 is knackered anyway.
"telnet localhost amandaidx" and enjoy watching tcpd and syslogd in an
infinite CPU consuming loop logging junk to your disk.
Forgot to mention.. once you cause problem 2) to occur, you have to manually
stop xinetd before killing the rogue amanda process restores sanity. Nasty.
amandaidx is turned off in amanda-<whatever version>-17.
*** Bug 15444 has been marked as a duplicate of this bug. ***