The Samba-Bugzilla – Attachment 8180 Details for
Bug 9379
[SECURITY] ntp_signd permissions are too broad
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Move the ntp socket to var/lib
0001-ntp_signd-move-socket-directory-to-var-lib-not-var-r.patch (text/plain), 1.19 KB, created by
Andrew Bartlett
on 2012-11-11 23:29:17 UTC
(
hide
)
Description:
Move the ntp socket to var/lib
Filename:
MIME Type:
Creator:
Andrew Bartlett
Created:
2012-11-11 23:29:17 UTC
Size:
1.19 KB
patch
obsolete
>From b0d26bd77dfc9e8d4fd7238e50f8c06d4d0aa518 Mon Sep 17 00:00:00 2001 >From: Andrew Bartlett <abartlet@samba.org> >Date: Mon, 12 Nov 2012 08:44:02 +1100 >Subject: [PATCH 1/2] ntp_signd: move socket directory to var/lib not var/run > for permissions change > >With the next patch, this becomes a socket directory on which we must >maintain administrator-specified permissions we will need to move it >away from directories that wipe at boot. > >This means the ntp.conf will need to change from (eg) > >ntpsigndsocket /usr/local/samba/var/run/ntp_signd/ > >to > >ntpsigndsocket /usr/local/samba/var/lib/ntp_signd/ > >Andrew Bartlett >--- > dynconfig/wscript | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >diff --git a/dynconfig/wscript b/dynconfig/wscript >index 44e8f19..d1c7a00 100755 >--- a/dynconfig/wscript >+++ b/dynconfig/wscript >@@ -226,8 +226,8 @@ dynconfig = { > 'DELAY': True, > }, > 'NTP_SIGND_SOCKET_DIR' : { >- 'STD-PATH': '${SOCKET_DIR}/ntp_signd', >- 'FHS-PATH': '${SOCKET_DIR}/ntp_signd', >+ 'STD-PATH': '${PRIVILEGED_SOCKET_DIR}/ntp_signd', >+ 'FHS-PATH': '${PRIVILEGED_SOCKET_DIR}/ntp_signd', > 'DELAY': True, > }, > 'NCALRPCDIR' : { >-- >1.7.11.7 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Flags:
abartlet
:
review?
(
jelmer
)
obnox
:
review+
Actions:
View
Attachments on
bug 9379
: 8180 |
8181