From owner-freebsd-ports Thu Mar 6 11:13:14 2003 Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E26DC37B410 for ; Thu, 6 Mar 2003 11:13:12 -0800 (PST) Received: from totem.fix.no (totem.fix.no [80.91.32.29]) by mx1.FreeBSD.org (Postfix) with ESMTP id A23B343FB1 for ; Thu, 6 Mar 2003 11:13:09 -0800 (PST) (envelope-from anders@totem.fix.no) Received: by totem.fix.no (Postfix, from userid 1000) id 9C7AA2025D; Thu, 6 Mar 2003 20:14:08 +0100 (CET) Date: Thu, 6 Mar 2003 20:14:08 +0100 From: Anders Nordby To: Adam Cc: ports@FreeBSD.ORG Subject: Re: Problem with FreeBSD port of Gringotts Message-ID: <20030306191408.GA72696@totem.fix.no> Mail-Followup-To: Anders Nordby , Adam , ports@FreeBSD.ORG References: <1046968743.460.51.camel@jake> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1046968743.460.51.camel@jake> X-PGP-Key: http://anders.fix.no/pgp/ X-PGP-Key-FingerPrint: 1E0F C53C D8DF 6A8F EAAD 19C5 D12A BC9F 0083 5956 User-Agent: Mutt/1.5.1i Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, On Thu, Mar 06, 2003 at 11:39:03AM -0500, Adam wrote: > -$ gringotts > (process:61927): gringotts-CRITICAL **: Cannot drop root privileges. > Someone is hacking this process. I cannot go on > > -$ sudo gringotts > (process:61925): gringotts-CRITICAL **: For security reasons, you cannot > run Gringotts as root. Try using -s > > > Anyone else had this problem with Gringotts? I'm able to start it as > root if I use -s, but I really don't think this is a very good idea (I > try to run as few things as possible as root). > > For more info on Gringotts: > http://devel.pluto.linux.it/projects/Gringotts/index.php?page=home Did you build gringotts from ports? Do you have ports/files/patch-grg_safe.c? What version of gringotts do you have? How about you try to delete your ports tree and re-cvsup it. I'm unable to reproduce this. The patch patch-grg_safe.c takes care of this issue, and it's been in the tree since the port was added. Oh, and, you're not supposed to run gringotts as root. :) Cheers, -- Anders. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message