>Number:         23528
>Category:       pkg
>Synopsis:       see subj.
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Fri Nov 21 23:16:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Michal Pasternak
>Release:        NetBSD 1.6.1
>Organization:
Good People With Bad Reputation
>Environment:
	
	
System: NetBSD mainframe.w.lub.pl 1.6.1 NetBSD 1.6.1 (GENERIC) #0: Tue Apr 8 12:05:52 UTC 2003 autobuild@tgm.daemon.org:/autobuild/netbsd-1-6/i386/OBJ/autobuild/netbsd-1-6/src/sys/arch/i386/compile/GENERIC i386
Architecture: i386
Machine: i386
>Description:

	    dircproxy runs as root by default.
	    
	    it doesn't need root privileges; it can successfully do it's 
	    job by running as nobody
	    
	    i have tested it as nobody. works. should be changed to avoid
	    eventual compromise of hosts running dircproxy.
	    
>How-To-Repeat:

	       install dircproxy
	       startup dircproxy via rc.d script
	       lookup dircproxy via ps(1)
>Fix:
     update rc.d script: change command="/usr/pkg/bin/${name}" to:

command="su -m nobody -c /usr/pkg/bin/${name}"
     
>Release-Note:
>Audit-Trail:
>Unformatted: