Date: Mon, 5 Nov 2001 16:54:31 +0000 From: David Taylor <davidt@yadt.co.uk> To: Clive Lin <clive@tongi.org> Cc: Kutulu <kutulu@kutulu.org>, ijliao@FreeBSD.ORG, freebsd-ports@FreeBSD.ORG Subject: Re: ports/30431: ircd-hybrid fails to open logfile when started as root and running as non-root Message-ID: <20011105165431.A93095@gattaca.yadt.co.uk> In-Reply-To: <20011021194658.A3397@malloc.eb.kliev.net>; from clive@tongi.org on Sun, Oct 21, 2001 at 19:46:58 %2B0800 References: <200110201346.f9KDkoH94175@freefall.freebsd.org> <20011020235846.A65605@cartier.cirx.org> <001c01c15981$a3614a40$88682518@longhill1.md.home.com> <20011020175246.A60977@gattaca.yadt.co.uk> <20011021194658.A3397@malloc.eb.kliev.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--wRRV7LY7NUeQGEoC Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, 21 Oct 2001, Clive Lin wrote: > > > was actually against 6.0 anyway, and I just downloaded the distributi= on of > > > 6.2 from sourceforge and the problem still exists. My original patch > > > doesn't apply cleanly (I was having a bad week that week), this one s= hould > > > work: > > >=20 > >=20 > > I'll look into getting this fixed in the official hybrid-6 source tree, > > although it's recommended that you start it as a non-root user, as it > > shouldn't need root privs. for anything really. >=20 > Nice to hear this :-) >=20 > Since you're the maintainer, would you like to wait or simply put > Kulutu's patch into ports ? >=20 Well, the official position of the hybrid team is that the SUID code shouldn't be used, and ircd should be run as a seperate user (e.g. ircd), which should own the logfiles. It might also be an idea to set up resource limits in login.conf and/or use the start_ircd or ircd_start programs available from tools/. I'd say applying the patch anyway would be a good idea, but i'm hesitant to start doing lots more before dropping privileges, as i'm not sure of the security implications... --=20 David Taylor davidt@yadt.co.uk --wRRV7LY7NUeQGEoC Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE75sRGfIqKXSsJ/xERAk7NAJsFNPVPW/JP3+Nm60aQ+87KSyIBowCggYgZ 8WeGdR/MoBXZHGqt+53OdsU= =qt5K -----END PGP SIGNATURE----- --wRRV7LY7NUeQGEoC-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011105165431.A93095>