From: Michael Orlitzky <mjo@gentoo.org>
Date: Thu, 31 Aug 2017 00:52:49 +0000 (-0400)
Subject: app-admin/tenshi: new revision with tenshi.conf owned by root:root.
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=7d56e1b385a02eab7852a3f0677f9f0f63c93df2;p=gentoo.git

app-admin/tenshi: new revision with tenshi.conf owned by root:root.

The tenshi.conf file was owned by the "tenshi" user in previous
revisions. This was open to exploitation because that conf file
contains two important settings:

  1. The UID that the daemon will run as.
  2. The "tail" command to be run on the logfiles.

If the "tenshi" user can write to it, he can specify an arbitrary
command to be run as an arbitrary UID the next time the daemon is
started.

Thanks to Brian De Wolf for noticing the problem.

Package-Manager: Portage-2.3.6, Repoman-2.3.1
---

diff --git a/app-admin/tenshi/tenshi-0.16.ebuild b/app-admin/tenshi/tenshi-0.16-r1.ebuild
similarity index 96%
rename from app-admin/tenshi/tenshi-0.16.ebuild
rename to app-admin/tenshi/tenshi-0.16-r1.ebuild
index 5ea26981d82e..45059dc892f4 100644
--- a/app-admin/tenshi/tenshi-0.16.ebuild
+++ b/app-admin/tenshi/tenshi-0.16-r1.ebuild
@@ -32,7 +32,6 @@ src_prepare() {
 
 src_install() {
 	emake DESTDIR="${D}" install
-	fowners tenshi:root /etc/tenshi/tenshi.conf
 	doman tenshi.8
 	newinitd tenshi.openrc-init tenshi