#679271 sispmctl: build additional package with enabled webserver

Package:
sispmctl
Source:
sispmctl
Description:
Control Gembird SIS-PM programmable power outlet strips
Submitter:
Michael Walle
Date:
2015-11-08 20:39:07 UTC
Severity:
wishlist
#679271#5
Date:
2012-06-27 14:00:43 UTC
From:
To:
It would be nice to have an additional package with the webserver enabled.
#679271#10
Date:
2015-11-08 20:36:31 UTC
From:
To:
The current code of sispmctl does not effectively drop user privileges
when starting the program as privileged user.

socket.c:

/* drop priveleges */
uid = getuid();
seteuid(uid);

This should be fixed before using sispmctl as a webserver.

cf.
http://www.cs.berkeley.edu/~daw/papers/setuid-usenix02.pdf

Best regards

Heinrich Schuchardt