Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 43825 - Permission of /etc/identd.key
Permission of /etc/identd.key
Status: CLOSED RAWHIDE
Product: Red Hat Linux
Classification: Retired
Component: pidentd (Show other bugs)
7.1
All Linux
low Severity medium
: ---
: ---
Assigned To: Trond Eivind Glomsrxd
Aaron Brown
: Security
Depends On:
Blocks:
  Show dependency tree / graph
 
Reported: 2001-06-07 09:06 EDT by Jan "Yenya" Kasprzak
Modified: 2007-03-26 23:45 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2001-06-07 09:06:08 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Jan "Yenya" Kasprzak 2001-06-07 09:06:06 EDT 
In Red Hat Linux 7.1, the /etc/identd.key is created
by /etc/rc.d/init.d/identd with owner and group of "identd",
and permission bits are set to 0600. From the security
point of view it would be better to have /etc/identd.key
owned by user root, group identd, and permission 0640.
With these permissions, even when the remote exploit
is found in identd, it cannot be used to modify the key file.

Even better solution would be to have /etc/identd.key
owned by user root, group root and permission 0600.
The current identd reads the key _before_ setuid(identd)
and setgid(identd) is called.

-Yenya
Comment 1 Trond Eivind Glomsrxd 2001-06-07 17:35:34 EDT 
pidentd-3.0.12-6 has ownership root.root - thanks for your feedback.
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.