Bug 6832 - kcheckpass must be SUID in order to work with NIS passwd
Summary: kcheckpass must be SUID in order to work with NIS passwd
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: kdebase
Version: 6.1
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Preston Brown
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 1999-11-08 20:06 UTC by ola
Modified: 2008-05-01 15:37 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 1999-11-23 16:09:24 UTC


Attachments (Terms of Use)

Description ola 1999-11-08 20:06:01 UTC
kcheckpass cannot validate a NIS-user if the
"use privileged port" security option is active for NIS passwords.

This means that the user cannot recover from e.g. locking the screen
with the KDE screensaver. X must be restarted, killing all active
applications. (It's very easy to trigger the bug.)

Presumably you'd get the same error with at shadow system.

Workaround: SUID on kcheckpass.

Comment 1 Preston Brown 1999-11-23 16:09:59 UTC
kcheckpass should not be using NIS directly, but rather indirectly through PAM.
all of the PAM processes run with system privileges, and thus should not have
trouble accessing a privileged port.

kcheckpass was compiled with PAM enabled and uses the "login" pam service by
default.


Note You need to log in before you can comment on or make changes to this bug.