Project

General

Profile

Actions
Copy link

Bug #1896

closed

Trying to suid to 1

Added by Bodo Eggert over 11 years ago. Updated over 11 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
2013-12-27
Due date:
% Done:

0%

Estimated time:
Found in version:
3.9.252
Affected Versions:

Description

When started from a user account as a daemon (-f), tvheadend tries to setuid(1) and - off cause - fails. Suppying -f -u "$UID" does not change that.

Using the daemon UID usually is the wrong choice, because if two daemons use the same UID, there is no privilege separation. An attacker will be able to take over all services if he cracks one.

Actions
Copy link

Also available in: Atom PDF