speed-dispatcher user needs a restricted shell (/usr/sbin/nologin or /bin/false) instead of /bin/sh.

Bug #1319970 reported by Alec Warner
260
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Speech Dispatcher
New
Undecided
Unassigned
speech-dispatcher (Debian)
Fix Released
Unknown
speech-dispatcher (Ubuntu)
Fix Released
Undecided
Luke Yelavich
Trusty
Confirmed
Undecided
Unassigned
Utopic
Fix Released
Undecided
Luke Yelavich

Bug Description

antarus@killbot:~$ getent passwd speech-dispatcher
speech-dispatcher:x:113:29:Speech Dispatcher,,,:/var/run/speech-dispatcher:/bin/sh

DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04

antarus@killbot:~$ apt-cache policy speech-dispatcher
speech-dispatcher:
  Installed: 0.8-5ubuntu1
  Candidate: 0.8-5ubuntu1

Changed in speech-dispatcher (Ubuntu):
assignee: nobody → Marc Deslauriers (mdeslaur)
Changed in speech-dispatcher:
importance: Unknown → Undecided
status: Unknown → New
Changed in speech-dispatcher (Ubuntu Utopic):
status: New → Confirmed
Changed in speech-dispatcher (Ubuntu Trusty):
status: New → Confirmed
information type: Public → Public Security
Luke Yelavich (themuso)
Changed in speech-dispatcher (Ubuntu Utopic):
assignee: Marc Deslauriers (mdeslaur) → Luke Yelavich (themuso)
status: Confirmed → In Progress
Changed in speech-dispatcher (Debian):
status: Unknown → New
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package speech-dispatcher - 0.8-6ubuntu2

---------------
speech-dispatcher (0.8-6ubuntu2) utopic; urgency=medium

  * The speech-dispatcher user should not have a shell set (LP: #1319970)
 -- Luke Yelavich <email address hidden> Fri, 16 May 2014 13:26:30 +1000

Changed in speech-dispatcher (Ubuntu Utopic):
status: In Progress → Fix Released
Changed in speech-dispatcher (Debian):
status: New → Fix Committed
Revision history for this message
Mark Stosberg (markstos) wrote :

As a security issue, will this fix be showing up in Ubuntu 14.04?

Changed in speech-dispatcher (Debian):
status: Fix Committed → Fix Released
Changed in speech-dispatcher (Debian):
status: Fix Released → New
Changed in speech-dispatcher (Debian):
status: New → Fix Committed
Changed in speech-dispatcher (Debian):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.