From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Nov 7 14:40:13 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 283C816A41F for ; Mon, 7 Nov 2005 14:40:13 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9A01543D4C for ; Mon, 7 Nov 2005 14:40:12 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id jA7EeC3b087420 for ; Mon, 7 Nov 2005 14:40:12 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id jA7EeCDl087419; Mon, 7 Nov 2005 14:40:12 GMT (envelope-from gnats) Resent-Date: Mon, 7 Nov 2005 14:40:12 GMT Resent-Message-Id: <200511071440.jA7EeCDl087419@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, aeonflux Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9C81C16A41F for ; Mon, 7 Nov 2005 14:32:08 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6D7C243D48 for ; Mon, 7 Nov 2005 14:32:08 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id jA7EW8kH029857 for ; Mon, 7 Nov 2005 14:32:08 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id jA7EW8ue029856; Mon, 7 Nov 2005 14:32:08 GMT (envelope-from nobody) Message-Id: <200511071432.jA7EW8ue029856@www.freebsd.org> Date: Mon, 7 Nov 2005 14:32:08 GMT From: aeonflux To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: ports/88602: privoxy poor defaults X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Nov 2005 14:40:13 -0000 >Number: 88602 >Category: ports >Synopsis: privoxy poor defaults >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Nov 07 14:40:12 GMT 2005 >Closed-Date: >Last-Modified: >Originator: aeonflux >Release: it's a port, but 5.4 and 6.0 >Organization: private >Environment: The problem lays in the port of privoxy >Description: the privoxy port by default runs as root, when you run the /usr/local/etc/rc.d/privoxy.sh script the daemon binds to the privoxy port and listens as uid=0! Seriously, it's a non priviledged port there's no reason to have this daemon listenning to a network socket as root. >How-To-Repeat: run the rc.d script, look at what uid is running the daemon. >Fix: Small fix to the privoxy.sh script to allow it to run as a privoxy/squid/cache user of some type. Maybe fix some of the defaults to let it write to it's log file. >Release-Note: >Audit-Trail: >Unformatted: