Bug 93991 - net-im/jabber-pyicq: jabber-pyicq-transport executes as root
Summary: net-im/jabber-pyicq: jabber-pyicq-transport executes as root
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Renato Botelho
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-03-01 19:20 UTC by neil
Modified: 2006-03-02 21:00 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description neil 2006-03-01 19:20:02 UTC 
jabber-pyicq-transport.sh doesn't set jabber_pyicq_user="jabber" so the transport executes as root.
This is a potential security hazard and I suggest that the aforementioned script should provide a default setting of
"jabber" to execute the transport under.

Fix: 

Add ': ${jabber_pyicq_user="jabber"}' into the startup script
How-To-Repeat: Start jabber-pyicq-transport.sh as root
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2006-03-01 21:40:32 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->garga

Over to maintainer
Comment 2 Renato Botelho freebsd_committer freebsd_triage 2006-03-02 21:00:51 UTC 
State Changed
From-To: open->closed

Committed. Thanks!