BIND 10 #2595: cmdctl with chusr crashes due to permission issue

BIND 10 Development do-not-reply at isc.org
Wed Jan 16 14:50:34 UTC 2013


#2595: cmdctl with chusr crashes due to permission issue
-------------------------------------+-------------------------------------
            Reporter:  jinmei        |                        Owner:
                Type:  defect        |  UnAssigned
            Priority:  medium        |                       Status:
           Component:  cmd-ctl       |  reviewing
            Keywords:                |                    Milestone:
           Sensitive:  0             |  Sprint-20130122
         Sub-Project:  Core          |                   Resolution:
Estimated Difficulty:  3             |                 CVSS Scoring:
         Total Hours:  0             |              Defect Severity:  N/A
                                     |  Feature Depending on Ticket:
                                     |          Add Hours to Ticket:  0
                                     |                    Internal?:  0
-------------------------------------+-------------------------------------
Changes (by jelte):

 * owner:  jelte => UnAssigned
 * status:  assigned => reviewing


Comment:

 Ready for review.

 Notes:
 - It is still a fatal error, however, it'll now put a much nicer fatal log
 message with the exact problem
 - Additionally, the config-time tests are extended (not only existence,
 but also readability and whether it is a file is checked), so unless files
 are changed or removed, it shouldn't get to the fatal point in normal
 usage
 - (note2: it still can't check the *contents* so you will get fatal-upon-
 connect errors if you configure it to some non-certificate/key file)
 - we can still decide to make it non-fatal, which should now be a much
 simpler change (but i agree that it should be fatal)
 - apart from adding tests, i fixed a few existing ones around this code,
 which happened to trigger some expected behaviour, but weren't actually
 correct imo

-- 
Ticket URL: <http://bind10.isc.org/ticket/2595#comment:4>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list