Public bug reported:
I noticed that transmission-daemon was running with the
groups of the tranmissions-daemon and root.
To test this run the following:
grep Groups: /proc/$thepid_of_tranmission_daemon/status
^ if it contains 0 then transmission daemon is running with an
addition root group.
^ if the output contains only the gid of the tranmission-daemon
group then there is no issue.
tranmission-daemon has no *reason* to not drop root's group and every
reason to *drop* it.
Here is a patch for the upstart script that will fix this issue(diff
against ubuntu 13.04's init script):
--- transmission-daemon.conf.orig 2013-06-01 12:19:34.568301160 +1000
+++ transmission-daemon.conf 2013-06-01 12:10:17.088301160 +1000
@@ -5,6 +5,7 @@
kill timeout 30
setuid debian-transmission
+setgid debian-transmission
respawn
** Affects: transmission (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to transmission in Ubuntu.
https://bugs.launchpad.net/bugs/1186470
Title:
Does not drop root's group
Status in “transmission” package in Ubuntu:
New
Bug description:
I noticed that transmission-daemon was running with the
groups of the tranmissions-daemon and root.
To test this run the following:
grep Groups: /proc/$thepid_of_tranmission_daemon/status
^ if it contains 0 then transmission daemon is running with an
addition root group.
^ if the output contains only the gid of the tranmission-daemon
group then there is no issue.
tranmission-daemon has no *reason* to not drop root's group and every
reason to *drop* it.
Here is a patch for the upstart script that will fix this issue(diff
against ubuntu 13.04's init script):
--- transmission-daemon.conf.orig 2013-06-01 12:19:34.568301160 +1000
+++ transmission-daemon.conf 2013-06-01 12:10:17.088301160 +1000
@@ -5,6 +5,7 @@
kill timeout 30
setuid debian-transmission
+setgid debian-transmission
respawn
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/transmission/+bug/1186470/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
