[Bug 911207] [NEW] upstart 1.4: setuid/setguid apply to ALL scripts
James Page
james.page at ubuntu.com
Tue Jan 3 12:28:38 UTC 2012
Public bug reported:
Upstart 1.4 on Ubuntu Precise from
https://launchpad.net/~jamesodhunt/+archive/upstart-job-logging
-----------------------
My understanding of the setuid/setguid stanza's in upstart 1.4 is that
they should emulate what start-stop-daemon/daemon and suchlike do with
regards to dropping privileges.
At the moment the stanza's apply to all script blocks (not just the main
exec one) which makes it hard to setup /var/run directories etc.. which
normally need to be created by root, not the owner of the application.
** Affects: upstart (Ubuntu)
Importance: Undecided
Status: New
** Description changed:
+ Upstart 1.4 on Ubuntu Precise from
+ https://launchpad.net/~jamesodhunt/+archive/upstart-job-logging
+
+ -----------------------
+
My understanding of the setuid/setguid stanza's in upstart 1.4 is that
they should emulate what start-stop-daemon/daemon and suchlike do with
regards to dropping privileges.
At the moment the stanza's apply to all script blocks (not just the main
exec one) which makes it hard to setup /var/run directories etc.. which
normally need to be created by root, not the owner of the application.
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to upstart in Ubuntu.
https://bugs.launchpad.net/bugs/911207
Title:
upstart 1.4: setuid/setguid apply to ALL scripts
Status in “upstart” package in Ubuntu:
New
Bug description:
Upstart 1.4 on Ubuntu Precise from
https://launchpad.net/~jamesodhunt/+archive/upstart-job-logging
-----------------------
My understanding of the setuid/setguid stanza's in upstart 1.4 is that
they should emulate what start-stop-daemon/daemon and suchlike do with
regards to dropping privileges.
At the moment the stanza's apply to all script blocks (not just the
main exec one) which makes it hard to setup /var/run directories etc..
which normally need to be created by root, not the owner of the
application.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/911207/+subscriptions
More information about the foundations-bugs
mailing list