[tahoe-lafs-trac-stream] [Tahoe-LAFS] #725: We should whine if we're running as root.

Tahoe-LAFS trac at tahoe-lafs.org
Sat Sep 27 02:22:56 UTC 2014


#725: We should whine if we're running as root.
-------------------------+-------------------------------------------------
     Reporter:  zandr    |      Owner:  davidsarah
         Type:           |     Status:  assigned
  enhancement            |  Milestone:  soon
     Priority:  major    |    Version:  1.4.1
    Component:  code-    |   Keywords:  easy security usability unix test-
  nodeadmin              |  needed
   Resolution:           |
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Old description:

> Just spent some time unravelling a problem at ScanCafe where nodes were
> refusing to start because they couldn't open storage/shares/incoming.
>
> It turns out that directory was owned by root. I'm guessing that someone
> tried to run the nodes as root, thus hosing things up. Not sure why that
> was the only thing affected, but it seemed to be.
>
> We should complain if we think we're running as root, possibly with a
> commandline switch or config entry to force it... or possibly not. :)

New description:

 Just spent some time unravelling a problem at ScanCafe where nodes were
 refusing to start because they couldn't open storage/shares/incoming.

 It turns out that directory was owned by root. I'm guessing that someone
 tried to run the nodes as root, thus hosing things up. Not sure why that
 was the only thing affected, but it seemed to be.

 We should complain if we think we're running as root, possibly with a
 commandline switch or config entry to force it... or possibly not. :)

--

Comment (by Lcstyle):

 i like making it an error, makes sense for unpriveleged users.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/725#comment:30>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list