It appears that that initlog program probably forgets to close
/etc/initlog.conf on fd 3 before starting shell to execute system startup
script. The shell and subsequently processes started by this shell inherit
/etc/initlog.conf open on fd 3.

This, IMHO no doubt, is a bug. I did not think too much about possible
security implications of this, but anyway, this consumes one low-numbered
fd and I can imagine programs having problems with this.


Eduard Vopicka

Here is relevant info from machine with up-to-date RH61 installed.


[root@eda /root]# rpm -qf /sbin/initlog
initscripts-4.63-1
[root@eda /root]# lsof | grep initlog\\.conf
apmd      151 root    3r   REG        8,3     562     6311
/etc/initlog.conf
atd       391 root    3r   REG        8,3     562     6311
/etc/initlog.conf
crond     407 root    3r   REG        8,3     562     6311
/etc/initlog.conf
inetd     423 root    3r   REG        8,3     562     6311
/etc/initlog.conf
xntpd     442 root    3r   REG        8,3     562     6311
/etc/initlog.conf
sshd      451 root    3r   REG        8,3     562     6311
/etc/initlog.conf
lpd       467 root    3r   REG        8,3     562     6311
/etc/initlog.conf
gpm       505 root    3r   REG        8,3     562     6311
/etc/initlog.conf
xfs       543 root    3r   REG        8,3     562     6311
/etc/initlog.conf
[root@eda /root]#