Bug 56484 - xinetd.d/tftp config invalid, results in errors, non-functioning service.
Summary: xinetd.d/tftp config invalid, results in errors, non-functioning service.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: tftp
Version: 7.0
Hardware: i386
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Elliot Lee
QA Contact: David Lawrence
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2001-11-19 19:33 UTC by Daniel Senie
Modified: 2007-04-18 16:38 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2001-11-19 19:33:23 UTC
Embargoed:


Attachments (Terms of Use)

Description Daniel Senie 2001-11-19 19:33:16 UTC
Description of Problem:

The /etc/xinetd.d/tftp file tries to use two conflicting protections. The 
first is to run as 'nobody' while the second is to use the -s parameter to 
chroot() to the specified directory.

It appears, however, that the user 'nobody' is not permitted to chroot() 
and so the tftp fails, logging:

   tftpd[7942]: chroot: Operation not permitted

repeated many times, then:

   xinetd[474]: tftp service was deactivated because of looping

into syslog, and giving the client tftp program no feedback whatsoever 
(looks like a non-responsive host).

Version-Release number of selected component (if applicable):

7.0

How Reproducible:

100%


Steps to Reproduce:
1. put a file in the tftp directory specified in the args line of 
the /etc/xinetd.d/tftp file.
2. tftp localhost
3. get <filename from step one, without path>

Actual Results:

hangs, spews errors.

Expected Results:


Additional Information:

changing the 'user = nobody' to 'user = root' solves the problem, and 
makes the config match the pre-xinetd config in inetd.conf in older 
versions of RedHat.

Comment 1 Elliot Lee 2001-12-18 22:28:00 UTC
The user=root thing appears to exist in RHL 7.2

Comment 2 Daniel Senie 2001-12-18 23:13:29 UTC
Please consider putting out errata for this type of thing, rather than telling 
people to upgrade to the current release. Many folks are using 7.0 and can't 
upgrade due to hardware issues. The errata can just be text indicating how 
people can fix this manually, as opposed to putting out a fixed RPM.

This is what it's all about supporting customers on the releases they use in 
production, vs. playing microsoft and telling people to just upgrade to the 
latest release.

That's my rant on marking bugs fixed as "CURRENTRELEASE". Now back to your 
regularly scheduled programming...


Note You need to log in before you can comment on or make changes to this bug.