Cannot start firebird server under any username other than "root", "firebird" , "interbas"or "interbase" [CORE3250] #3618
Labels
affect-version: 1.5.6
affect-version: 2.0.4
affect-version: 2.0.5
affect-version: 2.0.6
affect-version: 2.1.0
affect-version: 2.1.1
affect-version: 2.1.2
affect-version: 2.1.3
affect-version: 2.5.0
affect-version: 3.0 Initial
component: engine
fix-version: 3.0 Alpha 1
priority: minor
qa: cannot be tested
type: bug
Submitted by: Tony Whyman (twhyman)
There seems to be a pointless restriction in "remote/inet_server.cpp" that stops a Firebird server being run except from "root", "firebird" , "interbas"or "interbase" users. On a production server, the server can only gain access to the security database or application databases if it is run under a user name that is already granted access to them and hence this restriction has little effect other than to frustrate anyone setting up test servers under other accounts.
If the server is started under "fakeroot" then this restriction has no effect anyway thus indicating that if security was the intent, then it is ineffective.
While fakeroot is a valid workaround, this is still no excuse for not deleting the offending code at the first opportunity.
Commits: 32ffebb
The text was updated successfully, but these errors were encountered: