Re: iked bug: root privileges required unnecessarily in configtest mode (-n)

2024-12-26 Thread Klemens Nanni
26.12.2024 19:29, Stuart Henderson пишет: > Diff that can be applied with patch: > (I added optional braces as it's multi line and I think clearer > like that). OK kn

Re: iked bug: root privileges required unnecessarily in configtest mode (-n)

2024-12-26 Thread Tobias Heider
On Thu, Dec 26, 2024 at 04:29:30PM +, Stuart Henderson wrote: > On 2024/12/26 10:47, William Rusnack wrote: > > >Synopsis: The iked(8) daemon currently requires root privileges even when > > >run with -n (configtest mode), which only validates the configuration file > > >syntax. This prevent

Re: iked bug: root privileges required unnecessarily in configtest mode (-n)

2024-12-26 Thread Stuart Henderson
On 2024/12/26 17:36, Kirill A. Korinsky wrote: > On Thu, 26 Dec 2024 17:29:30 +0100, > Stuart Henderson wrote: > > > > Diff that can be applied with patch: > > (I added optional braces as it's multi line and I think clearer > > like that). > > > > ok? > > > > Doesn't a user who runs validation

Re: iked bug: root privileges required unnecessarily in configtest mode (-n)

2024-12-26 Thread Kirill A . Korinsky
On Thu, 26 Dec 2024 17:29:30 +0100, Stuart Henderson wrote: > > Diff that can be applied with patch: > (I added optional braces as it's multi line and I think clearer > like that). > > ok? > Doesn't a user who runs validation need access to the keys in /etc/iked/private? > > Index: iked.c > =

Re: iked bug: root privileges required unnecessarily in configtest mode (-n)

2024-12-26 Thread Stuart Henderson
On 2024/12/26 10:47, William Rusnack wrote: > >Synopsis:The iked(8) daemon currently requires root privileges even when > >run with -n (configtest mode), which only validates the configuration file > >syntax. This prevents system administrators from validating iked > >configuration files fro

iked bug: root privileges required unnecessarily in configtest mode (-n)

2024-12-26 Thread William Rusnack
>Synopsis: The iked(8) daemon currently requires root privileges even when >run with -n (configtest mode), which only validates the configuration file >syntax. This prevents system administrators from validating iked configuration >files from non-privileged accounts. >Category: bin >De