|
|
Subscribe / Log in / New account

systemd fails to parse user that should run service

From:  Daniel Skowroński <daniel-OsUCPFE7I1NeoWH0uzbU5w-AT-public.gmane.org>
To:  "oss-security-ZwoEplunGu1jrUoiu81ncdBPR1lH4CV8-AT-public.gmane.org" <oss-security-ZwoEplunGu1jrUoiu81ncdBPR1lH4CV8-AT-public.gmane.org>
Subject:  systemd fails to parse user that should run service
Date:  Sun, 2 Jul 2017 09:08:48 +0000
Message-ID:  <VI1PR04MB310470DAAF5F79C8BA8AE789D6D10@VI1PR04MB3104.eurprd04.prod.outlook.com>

Hi all,

Just wanted to bring attention to issue with systemd not doing what is expected when parsing User
that should run service.
When it fails to parse string starting with digit it fails back to root causing obvious threat to
security.

See discussion with developer on github: https://github.com/systemd/systemd/issues/6237

Best,
-Daniel Skowronski


to post comments


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds