#3777 If access check for a privileged pipe fails, the responder loops indefinitely
Closed: Fixed 5 years ago Opened 5 years ago by jhrozek.

The responder code has this check for a very long time:

495         if ( ! (stat_buf.st_uid == 0 && stat_buf.st_gid == 0 &&
 496                (stat_buf.st_mode&(S_IFSOCK|S_IRUSR|S_IWUSR)) == stat_buf.st_mode)) {
 497             DEBUG(SSSDBG_CRIT_FAILURE,
 498                   "privileged pipe has an illegal status.\n");
 499     /* TODO: what is the best response to this condition? Terminate? */
 500             return;
 501         }
 502     }

Exactly as TODO says, since the connection is not terminated, the fd activity is never terminated either and the responder loops indefinitely.


Metadata Update from @jhrozek:
- Issue assigned to jhrozek

5 years ago

Metadata Update from @jhrozek:
- Issue tagged with: PR

5 years ago

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue set to the milestone: SSSD 1.16.3
- Issue status updated to: Closed (was: Open)

5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4783

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata