Thank you for reporting this bug to Ubuntu. karmic has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against karmic is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.
Please feel free to report any other bugs you may find.
** Changed in: dhcp3 (Ubuntu Karmic)
Status: Confirmed => Won't Fix
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to isc-dhcp in Ubuntu.
https://bugs.launchpad.net/bugs/727837
Title:
dhcp3-server fails to drop privileges properly
Status in “dhcp3” package in Ubuntu:
Confirmed
Status in “isc-dhcp” package in Ubuntu:
Confirmed
Status in “dhcp3” source package in Lucid:
Confirmed
Status in “isc-dhcp” source package in Lucid:
Invalid
Status in “dhcp3” source package in Maverick:
Confirmed
Status in “isc-dhcp” source package in Maverick:
Invalid
Status in “dhcp3” source package in Natty:
Confirmed
Status in “isc-dhcp” source package in Natty:
Confirmed
Status in “dhcp3” source package in Dapper:
Won't Fix
Status in “isc-dhcp” source package in Dapper:
Invalid
Status in “dhcp3” source package in Hardy:
Confirmed
Status in “isc-dhcp” source package in Hardy:
Invalid
Status in “dhcp3” source package in Karmic:
Won't Fix
Status in “isc-dhcp” source package in Karmic:
Invalid
Bug description:
Binary package hint: dhcp3-server
In debian/patches/droppriv.dpatch there is some privilege dropping
code in function drop_privileges(). This fails to drop privileges of
root-group and does not initialize the groups properly.
One can test this by adding:
on commit {
execute("/usr/local/bin/dhcp_group_test");
}
to /etc/dhcp3/dhcpd.conf, and then write
/usr/local/bin/dhcp_group_test to log the output of "id" to some file.
(You may wish to turn apparmor off for this test, but it can be done
with it as well). The output should read:
uid=112(dhcpd) gid=120(dhcpd) groups=0(root)
This means that dhcp will retain the root-group privileges and is
missing other groups that a user may have possibly defined for it.
The fix would be to use either initgroups() or setgroups() function
properly in drop_privileges(). Doing this should also fix this bug:
https://bugs.launchpad.net/ubuntu/+source/dhcp3/+bug/341817
This is:
Description: Ubuntu 10.04.1 LTS
Release: 10.04
dhcp3-server:
Installed: 3.1.3-2ubuntu3
Candidate: 3.1.3-2ubuntu3
Version table:
*** 3.1.3-2ubuntu3 0
500 http://mirror.opinsys.fi/ubuntu/ lucid/main Packages
100 /var/lib/dpkg/status
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dhcp3/+bug/727837/+subscriptions