[Prelude Hybrid IDS] #223: pid file is created with wrong permissions
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#223: pid file is created with wrong permissions -------------------------------------------------+-------------------------- Reporter: Pierre Chifflier <[email protected]> | Owner: yoann Type: defect | Status: new Priority: normal | Milestone: Component: prelude-manager | Version: 0.9 Severity: normal | Keywords: -------------------------------------------------+-------------------------- in function prelude_daemonize() (libprelude), pid file is created before calling setsid(). This means that the pid will be created with permissions 0600 and owner root. If running prelude-manager with a non-privileged user, it will be unable to remove file on exit: {{{ # grep ^user /etc/prelude-manager/prelude-manager.conf user = prelude # prelude-manager -d -P /var/run/prelude-manager/prelude-manager.pid # ls -al /var/run/prelude-manager/prelude-manager.pid -rw------- 1 root prelude 5 2007-05-06 19:53 /var/run/prelude-manager /prelude-manager.pid }}} Stopping the server will fail with error: {{{ piche prelude-manager: daemonize.c:lockfile_unlink:52: couldn't delete lockfile /var/run/prelude-manager/prelude-manager.pid. }}} -- Ticket URL: <https://trac.prelude-ids.org/ticket/223> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel