Lucene search

K
fedoraFedoraFEDORA:5D40F1112D0
HistoryMay 13, 2010 - 7:25 p.m.

[SECURITY] Fedora 11 Update: mod_auth_shadow-2.2-8.fc11

2010-05-1319:25:52
lists.fedoraproject.org
6

0.004 Low

EPSS

Percentile

72.7%

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as “nobody”. mod_auth_shadow addresses this difficulty by opening a pipe to an suid root program, validate, which does the actual validation. When there is a failure, validate writes an error message to the system log, and waits three seconds before exiting.

OSVersionArchitecturePackageVersionFilename
Fedora11anymod_auth_shadow< 2.2UNKNOWN

0.004 Low

EPSS

Percentile

72.7%