Bug 28887 - [PATCH] sandbox for httptunnel
Summary: [PATCH] sandbox for httptunnel
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Florent Thoumie
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2001-07-11 04:20 UTC by anarcat
Modified: 2005-04-04 13:55 UTC (History)
0 users

See Also:


Attachments
file.diff (2.30 KB, patch)
2001-07-11 04:20 UTC, anarcat
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description anarcat 2001-07-11 04:20:01 UTC
httptunnel is a simple program which translates a http connection into 
a ip tunnel, badly put. :) It can run on lower ports and therefore does not
need extra priviledges.

As currently installed, the hts(1) and htc(1) daemons run as root.

Fix: Here is a patch on httptunnel.sh that would enable hts and htc to run as 
a defined user. There is nothing here to create the user in itself, and by
all means that the user exists. The code to add the user could be taken from
another port easily (I could do it, if necessary).

I also had to modify the code using $@ for "" escaping-stuff.

Patch also intermitantly available at:

ftp://anarcat.dyndns.org/pub/FreeBSD/local_patches/httptunnel.sh.patch

or

http://ftp.anarcat.dyndns.org/pub/FreeBSD/local_patches/httptunnel.sh.patch
How-To-Repeat: 
[install httptunnel via ports/packagse, whatever]
/usr/local/etc/rc.d/httptunnel.sh start
Comment 1 anarcat 2001-07-11 16:55:04 UTC
I'm sorry, ftp server not really reliable, and bad http url. This is the good one:

http://anarcat.dyndns.org/ftp/pub/FreeBSD/local_patches/httptunnel.sh
-- 
Everything is normal. Thus, nothing is.
Comment 2 Brian Somers freebsd_committer freebsd_triage 2001-07-18 19:05:12 UTC
Responsible Changed
From-To: freebsd-ports->brian

I'm maintainer of httptunnel
Comment 3 Kris Kennaway freebsd_committer freebsd_triage 2003-11-03 00:58:15 UTC
Responsible Changed
From-To: brian->freebsd-ports-bugs

Port maintainer was reset
Comment 4 Sergei Kolobov freebsd_committer freebsd_triage 2003-11-23 00:22:34 UTC
Responsible Changed
From-To: freebsd-ports-bugs->sergei

I'll see what can be done about this 2-year-old PR.
Comment 5 Mark Linimon freebsd_committer freebsd_triage 2004-07-10 04:15:30 UTC
State Changed
From-To: open->feedback

Has there been any progress on this one?
Comment 6 Mark Linimon freebsd_committer freebsd_triage 2005-02-06 20:43:38 UTC
Responsible Changed
From-To: sergei->freebsd-ports-bugs

Reassign due to lack of feedback from Responsible (many months).
Comment 7 Mark Linimon freebsd_committer freebsd_triage 2005-02-06 20:44:07 UTC
State Changed
From-To: feedback->open

Reset due to lack of feedback from Responsible.
Comment 8 Florent Thoumie freebsd_committer freebsd_triage 2005-03-09 09:07:58 UTC
State Changed
From-To: open->feedback

Could you rewrite the script to use rcNG framework (aka rc_subr) ? 


Comment 9 Florent Thoumie freebsd_committer freebsd_triage 2005-03-09 09:07:58 UTC
Responsible Changed
From-To: freebsd-ports-bugs->flz

Take replies.
Comment 10 Florent Thoumie freebsd_committer freebsd_triage 2005-04-04 13:54:48 UTC
State Changed
From-To: feedback->closed

Committed, thanks!