[asterisk-bugs] [AsteriskNOW and Packages 0019275]: RPM package creates /etc/passwd user with /sbin/nologin

Asterisk Bug Tracker noreply at bugs.digium.com
Wed May 11 13:23:28 CDT 2011


A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=19275 
====================================================================== 
Reported By:                dprophit
Assigned To:                
====================================================================== 
Project:                    AsteriskNOW and Packages
Issue ID:                   19275
Category:                   Package Issues
Reproducibility:            always
Severity:                   block
Priority:                   normal
Status:                     new
JIRA:                        
====================================================================== 
Date Submitted:             2011-05-11 12:39 CDT
Last Modified:              2011-05-11 13:23 CDT
====================================================================== 
Summary:                    RPM package creates /etc/passwd user with
/sbin/nologin
Description: 
RPM installer creates user with wrong shell. Should be /bin/sh so that
System() functions work.
====================================================================== 

---------------------------------------------------------------------- 
 (0134799) davidw (reporter) - 2011-05-11 13:23
 https://issues.asterisk.org/view.php?id=19275#c134799 
---------------------------------------------------------------------- 
system(3) unconditionally uses sh -c  It does not use ${SHELL}

http://pubs.opengroup.org/onlinepubs/007908799/xsh/system.html

/sbin/nologin appears correct from a security point of view.

Maybe there is a re-implemenation of system(3), but if that uses ${SHELL},
the bug lies there. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2011-05-11 13:23 davidw         Note Added: 0134799                          
======================================================================




More information about the asterisk-bugs mailing list