Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-15938

A number of files are installed with the wrong owner and group.

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 3.1.0, 4.0.0
    • 3.0.1, 3.0.2, 3.0.3
    • installer
    • Security Level: Public
    • Untriaged
    • Centos 64-bit
    • Unknown

    Description

      A number of the files are install as the owner and group being "1000" or root.

      User Ownership

      sudo find /opt/couchbase/  -printf "%u %p\n" | grep -v "^couchbase" | grep -v "bin"
      root /opt/couchbase/var/lib/couchbase/logs/start.log
      root /opt/couchbase/doc
      root /opt/couchbase/man
      1000 /opt/couchbase/lib/python/pysnappy2
      1000 /opt/couchbase/lib/python/pysnappy2/test_snappy.py
      1000 /opt/couchbase/lib/python/pysnappy2/__init__.py
      1000 /opt/couchbase/lib/python/pysnappy2/test_snappy_cffi.py
      1000 /opt/couchbase/lib/python/pysnappy2/snappy.py
      1000 /opt/couchbase/lib/python/pysnappy2/snappy_cffi.py
      1000 /opt/couchbase/lib/python/pysnappy2/_snappy.so
      1000 /opt/couchbase/lib/python/pysqlite2
      1000 /opt/couchbase/lib/python/pysqlite2/test
      1000 /opt/couchbase/lib/python/pysqlite2/test/userfunctions.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/types.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/__init__.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/py25
      1000 /opt/couchbase/lib/python/pysqlite2/test/py25/__init__.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/py25/py25tests.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/dbapi.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/factory.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/transactions.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/dump.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/regression.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/hooks.py
      1000 /opt/couchbase/lib/python/pysqlite2/__init__.py
      1000 /opt/couchbase/lib/python/pysqlite2/_sqlite.so
      1000 /opt/couchbase/lib/python/pysqlite2/dump.py
      1000 /opt/couchbase/lib/python/pysqlite2/dbapi2.py
      

      Group Ownership

      sudo find /opt/couchbase/  -printf "%g %p\n" | grep -v "^couchbase" | grep -v "bin"                                                                                                                                                                                                                                                                                                       
      root /opt/couchbase/var/lib/couchbase/couchbase-server.pid
      root /opt/couchbase/var/lib/couchbase/logs/start.log
      root /opt/couchbase/doc
      root /opt/couchbase/man
      1000 /opt/couchbase/lib/python/pysnappy2
      1000 /opt/couchbase/lib/python/pysnappy2/test_snappy.py
      1000 /opt/couchbase/lib/python/pysnappy2/__init__.py
      1000 /opt/couchbase/lib/python/pysnappy2/test_snappy_cffi.py
      1000 /opt/couchbase/lib/python/pysnappy2/snappy.py
      1000 /opt/couchbase/lib/python/pysnappy2/snappy_cffi.py
      1000 /opt/couchbase/lib/python/pysnappy2/_snappy.so
      1000 /opt/couchbase/lib/python/pysqlite2
      1000 /opt/couchbase/lib/python/pysqlite2/test
      1000 /opt/couchbase/lib/python/pysqlite2/test/userfunctions.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/types.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/__init__.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/py25
      1000 /opt/couchbase/lib/python/pysqlite2/test/py25/__init__.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/py25/py25tests.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/dbapi.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/factory.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/transactions.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/dump.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/regression.py
      1000 /opt/couchbase/lib/python/pysqlite2/test/hooks.py
      1000 /opt/couchbase/lib/python/pysqlite2/__init__.py
      1000 /opt/couchbase/lib/python/pysqlite2/_sqlite.so
      1000 /opt/couchbase/lib/python/pysqlite2/dump.py
      1000 /opt/couchbase/lib/python/pysqlite2/dbapi2.py
      

      The files that are owned by 1000 are a security risk as a user with id 1000 can modify those files.

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              pvarley Patrick Varley (Inactive)
              pvarley Patrick Varley (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty