[QPID-7090] qpidd should not use root as user

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: qpid-cpp-0.34
• Component/s: C++ Broker
• Labels: features packaging security

Environment

Debian/Ubuntu

• Assignee: Irina Boverman
• Reporter: Morgan Lindqvist
• Created: 22/Feb/16 23:26
• Updated: 06/Sep/16 14:39
• Resolved: 11/Mar/16 20:38

Description

When using the testing PPA on https://launchpad.net/~qpid to install qpidd the daemon is executed using the user id and group id "root".

The user id and group id that should be used is "qpidd".

This will significantly reduce the risk the the daemon can be used to get root access on the server.