net-analyzer/arpwatch: new revision to fix privilege escalation.
authorMichael Orlitzky <mjo@gentoo.org>
Sun, 22 Oct 2017 17:22:30 +0000 (13:22 -0400)
committerMichael Orlitzky <mjo@gentoo.org>
Sun, 22 Oct 2017 17:40:01 +0000 (13:40 -0400)
commit6739ee69e69a954bc27a3040ab59d46b82582229
tree64a07db70e74f0dcce8512945e1504829e03a401
parent9fb74493ce2b0d4f0bd16bf059045c263e3773ca
net-analyzer/arpwatch: new revision to fix privilege escalation.

In previous revisions, the init script for arpwatch called "chown" as
root on a location under /var/lib/arpwatch -- a path that is controlled
by the "arpwatch" user per its ebuild. That could be exploited by the
"arpwatch" user to take control of root-owned files.

This new revision comes with a new init script and conf.d file that
completely rework the way instances are created and run. The
"arpwatch" user is hard-coded, because as was mentioned, the ebuild
sets some important permissions for that user. Since it is not
possible to change that user, the need for "chown" is eliminated.

Separate instances are now created by symlinking the init script (like
our network interface scripts), rather than by enumerating them in a
single arpwatch init script. Upgraders will want to review their
configurations.

Bug: https://bugs.gentoo.org/602552
Package-Manager: Portage-2.3.8, Repoman-2.3.3
net-analyzer/arpwatch/arpwatch-2.1.15-r10.ebuild [new file with mode: 0644]
net-analyzer/arpwatch/files/arpwatch.confd-r1 [new file with mode: 0644]
net-analyzer/arpwatch/files/arpwatch.initd-r1 [new file with mode: 0644]