search

apple / ccs-calendarserver

The Calendar and Contacts Server.
https://www.calendarserver.org
Apache License 2.0
484 stars 136 forks source link

Only root can drop privileges. You are: caldav #493

Closed f1-outsourcing closed 7 years ago

f1-outsourcing commented 7 years ago

almost clean install with caldavd-stdconfig.plist

2017-06-24T17:44:49+0200 [caldav-0] Reading configuration from file: /usr/local/calendarserver/conf/caldavd-dev.plist 2017-06-24T17:44:49+0200 [caldav-0] Usage: twistd [options] 2017-06-24T17:44:49+0200 [caldav-0] Options: 2017-06-24T17:44:49+0200 [caldav-0] -f, --config= Path to configuration file. [default: 2017-06-24T17:44:49+0200 [caldav-0] /etc/caldavd/caldavd.plist] 2017-06-24T17:44:49+0200 [caldav-0] --version Display Twisted version and exit. 2017-06-24T17:44:49+0200 [caldav-0] -o, --option= Set an option to override a value in the config file. True, 2017-06-24T17:44:49+0200 [caldav-0] False, int, and float options are supported, as well as 2017-06-24T17:44:49+0200 [caldav-0] comma separated lists. Only one option may be given for 2017-06-24T17:44:49+0200 [caldav-0] each --option flag, however multiple --option flags may 2017-06-24T17:44:49+0200 [caldav-0] be specified. 2017-06-24T17:44:49+0200 [caldav-0] --help Display this help and exit. 2017-06-24T17:44:49+0200 [caldav-0] /usr/local/calendarserver/.develop/virtualenv/bin/twistd: Only root can drop privileges. You are: caldav 2017-06-24T17:44:59+0200 [caldav-1] Reading configuration from file: /usr/local/calendarserver/conf/caldavd-dev.plist 2017-06-24T17:45:00+0200 [caldav-1] Usage: twistd [options] 2017-06-24T17:45:00+0200 [caldav-1] Options: 2017-06-24T17:45:00+0200 [caldav-1] -f, --config= Path to configuration file. [default: 2017-06-24T17:45:00+0200 [caldav-1] /etc/caldavd/caldavd.plist] 2017-06-24T17:45:00+0200 [caldav-1] -o, --option= Set an option to override a value in the config file. True, 2017-06-24T17:45:00+0200 [caldav-1] False, int, and float options are supported, as well as 2017-06-24T17:45:00+0200 [caldav-1] comma separated lists. Only one option may be given for 2017-06-24T17:45:00+0200 [caldav-1] each --option flag, however multiple --option flags may 2017-06-24T17:45:00+0200 [caldav-1] be specified. 2017-06-24T17:45:00+0200 [caldav-1] --version Display Twisted version and exit. 2017-06-24T17:45:00+0200 [caldav-1] --help Display this help and exit. 2017-06-24T17:45:00+0200 [caldav-1] /usr/local/calendarserver/.develop/virtualenv/bin/twistd: Only root can drop privileges. You are: caldav 2017-06-24T17:45:00+0200 [caldav-0] Reading configuration from file: /usr/local/calendarserver/conf/caldavd-dev.plist 2017-06-24T17:45:00+0200 [caldav-0] Usage: twistd [options] 2017-06-24T17:45:00+0200 [caldav-0] Options: 2017-06-24T17:45:00+0200 [caldav-0] -f, --config= Path to configuration file. [default: 2017-06-24T17:45:00+0200 [caldav-0] /etc/caldavd/caldavd.plist] 2017-06-24T17:45:00+0200 [caldav-0] -o, --option= Set an option to override a value in the config file. True, 2017-06-24T17:45:00+0200 [caldav-0] False, int, and float options are supported, as well as 2017-06-24T17:45:00+0200 [caldav-0] comma separated lists. Only one option may be given for 2017-06-24T17:45:00+0200 [caldav-0] each --option flag, however multiple --option flags may 2017-06-24T17:45:00+0200 [caldav-0] be specified. 2017-06-24T17:45:00+0200 [caldav-0] --version Display Twisted version and exit. 2017-06-24T17:45:00+0200 [caldav-0] --help Display this help and exit. 2017-06-24T17:45:00+0200 [caldav-0] /usr/local/calendarserver/.develop/virtualenv/bin/twistd: Only root can drop privileges. You are: caldav

dreness commented 7 years ago

Putting aside what looks like invocation / usage errors causing usage text to be spewed, you should find that if you simply don't specify a user or group, no attempt is made to drop privs.

from: https://github.com/apple/ccs-calendarserver/blob/master/conf/caldavd-stdconfig.plist#L769

    <!-- Username and Groupname to drop privileges to, if empty privileges will not
         be dropped. -->
    <key>UserName</key>
    <string></string>

    <key>GroupName</key>
    <string></string>