[Jailkit-dev] [bug #23493] Jailkit does not honour users with the same user id

[Olivier Sessink]

Update of bug #23493 (project jailkit):

                Severity:              3 - Normal => 2 - Minor              
                  Status:                    None => Need Info              

    _______________________________________________________

Follow-up Comment #1:

I'm not sure if posix standards allow multiple usernames to use the same user
ID. I think not. If posix standards allow this this is clearly a bug. If not,
perhaps an exception option can be created.

This check is not crazy b.t.w. jk_chrootsh runs with root privileges. it
should make very sure that it will become the same user with the same rights
inside the jail as the original user. If the account information inside the
jail is different (the getpwuid() call inside the jail returns a different
user from outside the jail) this is a serious sign that somebody could be
tampering with access rights.

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?23493>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/