Bug 541464 - Run sphinx searchd as non-root user
Summary: Run sphinx searchd as non-root user
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: sphinx
Version: rawhide
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Allisson Azevedo
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-11-25 23:56 UTC by Jonas Courteau
Modified: 2010-03-02 01:04 UTC (History)
1 user (show)

Fixed In Version: sphinx-0.9.9-1.fc12
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-03-02 00:55:22 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
Proposed patch to the spec file and init script (2.68 KB, patch)
2009-11-25 23:57 UTC, Jonas Courteau
no flags Details | Diff

Description Jonas Courteau 2009-11-25 23:56:30 UTC
Description of problem:
Ideally searchd and the various index utilities should not be running as root - they don't specifically need root access.  Unfortunately searchd doesn't drop privileges, so any privilege changes need to be done via runuser.

Version-Release number of selected component (if applicable):


How reproducible: N/A - feature request


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Attached are patches to the spec and to the init script adding the appropriate code to create the user on install, remove it on uninstall, and setting the appropriate permissions everywhere.

Note that I'm not sure the process to add a username to the list at https://fedoraproject.org/wiki/PackageUserRegistry so I used user number 51 in the script.  If there's a process that I should do to get that added, I'd be happy to do it.

Comment 1 Jonas Courteau 2009-11-25 23:57:29 UTC
Created attachment 373882 [details]
Proposed patch to the spec file and init script

Comment 2 Fedora Update System 2010-02-11 13:54:29 UTC
sphinx-0.9.9-1.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/sphinx-0.9.9-1.fc12

Comment 3 Fedora Update System 2010-02-11 13:54:38 UTC
sphinx-0.9.9-1.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/sphinx-0.9.9-1.fc11

Comment 4 Fedora Update System 2010-02-12 04:45:08 UTC
sphinx-0.9.9-1.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update sphinx'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2010-1792

Comment 5 Fedora Update System 2010-02-12 04:49:34 UTC
sphinx-0.9.9-1.fc11 has been pushed to the Fedora 11 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update sphinx'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2010-1814

Comment 6 Fedora Update System 2010-03-02 00:55:13 UTC
sphinx-0.9.9-1.fc11 has been pushed to the Fedora 11 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2010-03-02 01:04:04 UTC
sphinx-0.9.9-1.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.