qboosh: SPECS shout.spec,1.1,1.2

[Jakub Bogusz]

On Thu, Apr 04, 2002 at 02:48:51PM +0200, Jarosław Kamper wrote:
> On Thu, Apr 04, 2002 at 09:03:14AM +0000, Jakub Bogusz wrote:
> > Module name:    SPECS
> > Changes by:     qboosh
> > 
> > Changed RCS file: /cvsroot/SPECS/shout.spec,v
> > ----------------------------
> > revision 1.2
> > date: 2002/04/04 09:03:10;  author: qboosh;  state: Exp;  lines: +32 -32
> > - added pl, gzip doc, some build fixes
> > - changed icecast's shell to /bin/sh (but does it really need working shell?)
> 
> Zmaina /bin/{ba,}sh na /bin/false:
> 
> kwi  4 14:42:14 jack su(pam_unix)[17436]: session opened for user
> icecast by jack(uid=0)
> kwi  4 14:42:14 jack su(pam_unix)[17436]: session closed for user
> icecast
> kwi  4 14:42:14 jack icecast: icecast startup  failed

To 'su' jest tylko w .init? To zmienić na su -s /bin/sh.

> >  %files
> > -%attr(754,root,icecast) /etc/rc.d/init.d/shout
> > +%attr(754,root,root) /etc/rc.d/init.d/shout

To jest uruchamiane z uid=0, więc grupa icecast jest tu zbędna.

> > -%attr(750,icecast,icecast) %{_bindir}/*
> > +%attr(755,root,root) %{_bindir}/*

A to była dziura - demony się uruchamia z innymi prawami m.in. po to,
żeby nie mogły pisać po plikach.


-- 
Jakub Bogusz