From owner-freebsd-ports Mon Nov 5 9:14:45 2001 Delivered-To: freebsd-ports@freebsd.org Received: from mail.yadt.co.uk (yadt.demon.co.uk [158.152.4.134]) by hub.freebsd.org (Postfix) with SMTP id 8489837B419 for ; Mon, 5 Nov 2001 09:14:35 -0800 (PST) Received: (qmail 22364 invoked from network); 5 Nov 2001 16:54:31 -0000 Received: from unknown (HELO mail.gattaca.yadt.co.uk) (qmailr@10.0.0.2) by yadt.demon.co.uk with SMTP; 5 Nov 2001 16:54:31 -0000 Received: (qmail 95271 invoked by uid 1000); 5 Nov 2001 16:54:31 -0000 Date: Mon, 5 Nov 2001 16:54:31 +0000 From: David Taylor To: Clive Lin Cc: Kutulu , ijliao@FreeBSD.ORG, freebsd-ports@FreeBSD.ORG Subject: Re: ports/30431: ircd-hybrid fails to open logfile when started as root and running as non-root Message-ID: <20011105165431.A93095@gattaca.yadt.co.uk> Mail-Followup-To: Clive Lin , Kutulu , ijliao@FreeBSD.ORG, freebsd-ports@FreeBSD.ORG References: <200110201346.f9KDkoH94175@freefall.freebsd.org> <20011020235846.A65605@cartier.cirx.org> <001c01c15981$a3614a40$88682518@longhill1.md.home.com> <20011020175246.A60977@gattaca.yadt.co.uk> <20011021194658.A3397@malloc.eb.kliev.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="wRRV7LY7NUeQGEoC" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20011021194658.A3397@malloc.eb.kliev.net>; from clive@tongi.org on Sun, Oct 21, 2001 at 19:46:58 +0800 Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --wRRV7LY7NUeQGEoC Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, 21 Oct 2001, Clive Lin wrote: > > > was actually against 6.0 anyway, and I just downloaded the distributi= on of > > > 6.2 from sourceforge and the problem still exists. My original patch > > > doesn't apply cleanly (I was having a bad week that week), this one s= hould > > > work: > > >=20 > >=20 > > I'll look into getting this fixed in the official hybrid-6 source tree, > > although it's recommended that you start it as a non-root user, as it > > shouldn't need root privs. for anything really. >=20 > Nice to hear this :-) >=20 > Since you're the maintainer, would you like to wait or simply put > Kulutu's patch into ports ? >=20 Well, the official position of the hybrid team is that the SUID code shouldn't be used, and ircd should be run as a seperate user (e.g. ircd), which should own the logfiles. It might also be an idea to set up resource limits in login.conf and/or use the start_ircd or ircd_start programs available from tools/. I'd say applying the patch anyway would be a good idea, but i'm hesitant to start doing lots more before dropping privileges, as i'm not sure of the security implications... --=20 David Taylor davidt@yadt.co.uk --wRRV7LY7NUeQGEoC Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE75sRGfIqKXSsJ/xERAk7NAJsFNPVPW/JP3+Nm60aQ+87KSyIBowCggYgZ 8WeGdR/MoBXZHGqt+53OdsU= =qt5K -----END PGP SIGNATURE----- --wRRV7LY7NUeQGEoC-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message