Bug 20697 - services won't start if another process of the same name is running
Summary: services won't start if another process of the same name is running
Status: CLOSED DUPLICATE of bug 20696
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: initscripts
Version: 7.0
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Bill Nottingham
QA Contact: David Lawrence
Keywords: Security
Depends On:
TreeView+ depends on / blocked
Reported: 2000-11-12 03:52 UTC by Eric Smith
Modified: 2014-03-17 02:17 UTC (History)
1 user (show)

Clone Of:
Last Closed: 2000-11-12 03:52:29 UTC

Attachments (Terms of Use)

Description Eric Smith 2000-11-12 03:52:26 UTC
The deamon() function in /etc/rc.d/init.d/functions will not start a
service if there is an existing process with the same name, becuase
pidofproc() finds it.  For instance, a user of my system runs a custom
httpd process, completely independent of the installed Apache server.  If I
issue the command "/etc/rc.d/init.d/httpd restart", it will fail, without
giving any indication that there was a problem.

This is a possible Denial of Service attack.  An unprivileged user can
interfere with the operation of any system services managed through
initscripts that uses the deamon() function.

Suggested fix:  add an argument to daemon() and pidofproc() for the
expected UID of the process, perhaps defaulting to root.  Or, by default
allow it to match only UIDs under 100.

Comment 1 Eric Smith 2000-11-12 03:53:42 UTC

*** This bug has been marked as a duplicate of 20696 ***

Comment 2 Eric Smith 2000-11-12 03:54:25 UTC
Sorry, submitted twice by accident

Note You need to log in before you can comment on or make changes to this bug.