On Wednesday 12 January 2011 10:23:19 Gabor Kiss wrote:
> Package: tacacs+
> Version: 4.0.4.19-8.kissg2
> Severity: minor
> 
> /etc/init.d/tac_plus does not care with $DAEMONUSER setting
> when starting the daemon. So it runs always as root.
> 
> However stop_server() fails to stop daemon because
> start-stop-daemon is forced to check process ownership.
> 
> Gabor
> 


Hello,

Thanks for your report.
I'v corrected the stop_server function and re-uploaded a new revision of this 
package to mentors.d.n.
I'm CCing Craig Small since he's my mentor for this package.

Unfortunately, the Tacacs+ daemon has hardcoded setuid commands to some value 
defined at compilation time.
As I can't be sure about the uid the daemon user account might have on a target 
system, I can't put some value here (at compilation time).

This is why this daemon software runs as root (I tried to make some patch at 
the begining of the packaging but without success).
If someone have an idea, please tell me so and we will be able to improve this 
situation :)

Regards,

Henry-Nicolas.



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to