[Koha-bugs] [Bug 25481] koha-plack not working under D10

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Fri May 15 02:26:24 CEST 2020


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25481

--- Comment #5 from David Cook <dcook at prosentient.com.au> ---
(In reply to Jonathan Druart from comment #2)
> Since D10, the behaviour of start-stop-daemon changed, see from its
> manual:
> """
> Warning:  using this match option with a world-writable pidfile or using it
> alone with a daemon that writes the pidfile as an unprivileged (non-root)
> user will be refused with an error (since
> version 1.19.3) as this is a security risk, because either any user can
> write to it, or if the daemon gets compromised, the contents of the pidfile
> cannot be trusted, and  then  a  privileged
> runner (such as an init script executed as root) would end up acting on any
> system process.  Using /dev/null is exempt from these checks.
> """

Oh right... that makes sense. Nevermind me... 😓

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list