#959179 oidentd: Oidentd should not try to drop privileges when run in inetd mode

Package:
oidentd
Source:
oidentd
Description:
replacement ident daemon
Submitter:
Patrik Schindler
Date:
2023-03-12 22:51:03 UTC
Severity:
wishlist
#959179#5
Date:
2020-04-30 12:58:25 UTC
From:
To:
Hello,

when run with inetd with an user != root, oidentd refuses to run:
Apr 30 14:50:54 xxx oidentd[29962]: Fatal: Failed to drop privileges (kernel)

ident           stream  tcp     nowait  oidentd    /usr/sbin/tcpd  oidentd -i -I

I think, dropping of privileges should not be tried when already running within
a different user account.
#959179#10
Date:
2023-03-12 22:33:16 UTC
From:
To:
Thursday 30 april, 2020 14:58:25 CET you wrote:

Sorry for taking three years to look at this. As far as I can tell, oidentd
doesn't try to drop privileges if not run as uid and/or gid 0. The only
problem I can see is that oidentd tries to change its primary group to its
fallback oidentd or nogroup if it's started with gid 0, even if it's not
started with uid 0. The user created by the package is called oident, not
oidentd. Did you create your own user and give it root as its primary group?