severity 50441 normal
thanks
I wrote:
> Herbert Xu <[EMAIL PROTECTED]> wrote:
> > I don't think you understand the problem. It's already in group telnetd,
> > we're talking about supplementary groups here.
>
> No. Submitter later wrote to me personally and said that I was right,
> and setting the group to telnetd in xinetd.conf worked. No, I don't
> have any proof, save my word.
Today, I apt-got newest telnet(d), and saw that the behaviour is indeed
like in the original report, i.e. xinetd.conf says:
service telnet
{
flags = REUSE NAMEINARGS
socket_type = stream
protocol = tcp
wait = no
user = telnetd
group = telnetd
server = /usr/sbin/tcpd
server_args = /usr/sbin/in.telnetd
}
And still, telnetd does:
open("/var/run/utmp", O_RDWR) = -1 EACCES (Permission denied)
I'm terribly sorry for the FUD, but the submitter really said that it
works (and I blindly believed him... hmpf :( ).
I'll inform the upstream author, Rob Braun, so we can get this fixed.
--
enJoy -*/\*- don't even try to pronounce my first name
