[MacPorts] #24042: mpd runs as root
MacPorts
noreply at macports.org
Sat Mar 13 14:42:41 PST 2010
#24042: mpd runs as root
-----------------------------------+----------------------------------------
Reporter: greg-macports@… | Owner: macports-tickets@…
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version: 1.8.2
Keywords: | Port: mpd
-----------------------------------+----------------------------------------
I just installed mpd (@0.15.8_0+macosx) and followed the advice for
getting launchd to run it. To my surprise, the mpd daemon runs as root.
This is a security problem, because it means that a security bug in mpd
could escalate and compromise the whole system. If mpd had its own user,
then such bugs would only affect mpd itself (and any files that can be
written by the mpd user).
--
Ticket URL: <http://trac.macports.org/ticket/24042>
MacPorts <http://www.macports.org/>
Ports system for Mac OS
More information about the macports-tickets
mailing list