Bug 686881 - rubygem-passenger: PassengerLoggingAgent runs as user nobody
Summary: rubygem-passenger: PassengerLoggingAgent runs as user nobody
Status: RESOLVED FIXED
Alias: None
Product: SUSE Security Incidents
Classification: Novell Products
Component: General (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Stefan Schubert
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords: security
Depends on:
Blocks:
 
Reported: 2011-04-12 13:03 UTC by Ludwig Nussel
Modified: 2015-03-30 09:57 UTC (History)
2 users (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ludwig Nussel 2011-04-12 13:03:05 UTC 
looking at the obs appliance the "PassengerLoggingAgent" process runs as user nobody. It should use something else.
Comment 1 Marcus Rückert 2011-04-12 13:48:01 UTC 
The appliance is done by adrian.
Comment 2 Adrian Schröter 2011-04-12 14:03:26 UTC 
I don't think that is special on the OBS appliance, it is default for all solutions/products which use our default rubygem-passenger package ?

Schubi, can you have a look at this ?
Comment 3 Stefan Schubert 2011-05-18 11:56:20 UTC 
Hm, it seems that it is a knowing issue, but no one does really take care:
http://groups.google.com/group/phusion-passenger/browse_thread/thread/56ea6a6f7479b277
I am not sure if it is really a problem.
Comment 4 Ludwig Nussel 2011-05-19 09:47:54 UTC 
It's not a problem if only one single program uses that user. Since 'nobody' isn't reserved for PassengerLoggingAgent it shouldn't use it.
Comment 5 Johannes Segitz 2015-03-30 09:57:42 UTC 
Is now run as wwwrun