Zope-Announce June 2012

zope-announce@zope.dev

1 participants
2 discussions

Heads up: backward-incompatible zdaemon, 3.0 release coming (probably today)
by Jim Fulton 08 Jun '12

08 Jun '12

I'm dropping some untested, largely undocumented, and likely unused features of zdaemon in the 3.0.0 release. Jim -- Jim Fulton http://www.linkedin.com/in/jimfulton Jerky is better than bacon! http://www.dublinstore.com/

1 0

Vulnerability in zdaemon 2.0.5 and earlier
by Jim Fulton 07 Jun '12

07 Jun '12

zdaemon is a Unix (Unix, Linux, Mac OS X) Python program that wraps commands to make them behave as proper daemons. See http://pypi.python.org/pypi/zdaemon. zdaemon can be configured to start as root and then switch to a less privileged user. In version 2.0.5 and earlier, zdaemon didn't update supplementary groups. Processes started as root retain root's supplementary groups, likely providing more privileges than intended. This is fixed by zdaemon 2.0.6. It's recommended that people using zdaemon 2.0.5 and earlier upgrade to 2.0.6 at their earliest convenience. -- Jim Fulton

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

Zope-Announce June 2012