NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

bin/57442: mdnsd(8) privilege separation is broken



>Number:         57442
>Category:       bin
>Synopsis:       mdnsd(8) privilege separation is broken
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat May 27 11:45:01 +0000 2023
>Originator:     Taylor R Campbell
>Release:        current
>Organization:
The NetMDNSD Foundation
>Environment:
>Description:
We have a pseudo-user _mdnsd for the use of mdnsd(8), but mdnsd(8) doesn't use it -- instead it uses the user nobody, which isn't supposed to be used by anybody.  It appears to have been lost in a 2018 update among merge conflicts.
>How-To-Repeat:
$ service mdnsd onestart
$ ps axuwww | grep mdnsd
>Fix:
Yes, please!



Home | Main Index | Thread Index | Old Index