Lucene search

K
fedoraFedoraFEDORA:9AB92110F37
HistoryMay 28, 2010 - 5:55 p.m.

[SECURITY] Fedora 13 Update: mod_auth_shadow-2.2-8.fc13

2010-05-2817:55:38
lists.fedoraproject.org
7

0.004 Low

EPSS

Percentile

72.7%

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as “nobody”. mod_auth_shadow addresses this difficulty by opening a pipe to an suid root program, validate, which does the actual validation. When there is a failure, validate writes an error message to the system log, and waits three seconds before exiting.

OSVersionArchitecturePackageVersionFilename
Fedora13anymod_auth_shadow< 2.2UNKNOWN

0.004 Low

EPSS

Percentile

72.7%