rsync service runs as user 'root'

Bug #1674987 reported by Adam Heczko
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Confirmed
Medium
Fuel Sustaining

Bug Description

It was observed that rsync service runs as root.
Most likely the service does not require 'root' account privileges, therefore it is recommended to run service with non root user account.

# cat /etc/rsyncd.conf
address = 10.40.0.2

[puppet]
path = /etc/puppet
read only = true
uid = 0
gid = 0
use chroot = no

[plugins]
path = /var/www/nailgun/plugins
read only = true
uid = 0
gid = 0
use chroot = no

# cat /etc/xinetd.d/rsync
service rsync
{
    disable = no
    socket_type = stream
    wait = no
    user = root
    server = /usr/bin/rsync
    server_args = --address=10.40.0.2 --daemon --log-file=/var/log/rsync.log
    bind = 10.40.0.2
    cps = 512 10
    flags = IPv4
    per_source = UNLIMITED
    log_on_failure += USERID
}

Changed in fuel:
importance: High → Wishlist
Dmitry Pyzhov (dpyzhov)
Changed in fuel:
assignee: nobody → Fuel Sustaining (fuel-sustaining-team)
status: New → Confirmed
importance: Wishlist → Medium
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.