[Prelude Hybrid IDS] #223: pid file is created with wrong permissions

"Prelude Hybrid IDS" <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
#223: pid file is created with wrong permissions
-------------------------------------------------+--------------------------
 Reporter:  Pierre Chifflier <[email protected]>  |       Owner:  yoann
     Type:  defect                               |      Status:  new  
 Priority:  normal                               |   Milestone:       
Component:  prelude-manager                      |     Version:  0.9  
 Severity:  normal                               |    Keywords:       
-------------------------------------------------+--------------------------
 in function prelude_daemonize() (libprelude), pid file is created before
 calling setsid(). This means that the pid will be created with permissions
 0600 and owner root. If running prelude-manager with a non-privileged
 user, it will be unable to remove file on exit:

 {{{
 # grep ^user /etc/prelude-manager/prelude-manager.conf
 user = prelude
 # prelude-manager -d -P /var/run/prelude-manager/prelude-manager.pid
 # ls -al /var/run/prelude-manager/prelude-manager.pid
 -rw------- 1 root prelude 5 2007-05-06 19:53 /var/run/prelude-manager
 /prelude-manager.pid
 }}}

 Stopping the server will fail with error:
 {{{
 piche prelude-manager: daemonize.c:lockfile_unlink:52: couldn't delete
 lockfile /var/run/prelude-manager/prelude-manager.pid.
 }}}

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/223>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.