Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-25 Thread Bas van Schaik
Hi Michael, I'm sorry, I should have been a little bit more clear about this. The zabbix_agentd process runs as zabbix:zabbix indeed, but the so called UserParameter scripts run with user:group zabbix:root. Or at least, this is the output of such a script calling `id`: uid=110(zabbix)

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-25 Thread Michael Ablassmeier
hi Bas, On Sun, Nov 25, 2007 at 12:21:17PM +0100, Bas van Schaik wrote: I'm sorry, I should have been a little bit more clear about this. The zabbix_agentd process runs as zabbix:zabbix indeed, but the so called UserParameter scripts run with user:group zabbix:root. Or at least, this is the

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-25 Thread Michael Ablassmeier
hi again, On Sun, Nov 25, 2007 at 02:19:46PM +0100, Michael Ablassmeier wrote: The agent uses popen in order to execute the UserCommands. I think popen just as exec* resets the gid to the saved-set-gid, which is then 0, thus the executed programm ends up with gid set to root. just a short

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-25 Thread Michael Ablassmeier
and hi, yet again, On Sun, Nov 25, 2007 at 03:01:15PM +0100, Michael Ablassmeier wrote: On Sun, Nov 25, 2007 at 02:19:46PM +0100, Michael Ablassmeier wrote: The agent uses popen in order to execute the UserCommands. I think popen just as exec* resets the gid to the saved-set-gid, which is

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-25 Thread Michael Ablassmeier
hi again, On Sun, Nov 25, 2007 at 03:01:15PM +0100, Michael Ablassmeier wrote: On Sun, Nov 25, 2007 at 02:19:46PM +0100, Michael Ablassmeier wrote: The agent uses popen in order to execute the UserCommands. I think popen just as exec* resets the gid to the saved-set-gid, which is then 0,

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-25 Thread Bas van Schaik
Thanks for the quick fix, Michael! I hope upstream will fix this soon so the patch will appear in testing. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-24 Thread Bas van Schaik
Package: zabbix-agent Version: 1:1.1.4-10 Severity: important The zabbix-agentd process runs as user 'zabbix' by default, which is of course very desirable. However, the process' gid defaults to 0 (root) which did really surprise me. On systems using this group for administrative purposes, this

Bug#452682: zabbix-agent runs as user 'zabbix' with gid=0 (root), configuring additional groups doesn't work

2007-11-24 Thread Michael Ablassmeier
tags 452682 + moreinfo tags 452682 + unreproducible thanks hi Bas, On Sat, Nov 24, 2007 at 03:43:40PM +0100, Bas van Schaik wrote: The zabbix-agentd process runs as user 'zabbix' by default, which is of course very desirable. However, the process' gid defaults to 0 (root) which did really