I installed a dedicated Gobby server called sobby. It's running as root. That's a very bad idea. Please, somebody sudo apt-get install sobby, and tell me if it runs as root.

chris@lucid:~$ ps -ef | grep sobby


root***** 1625**** 1* 0 Jun14 ?******* 00:00:00 /usr/bin/sobby
chris**** 5300* 8500* 0 11:45 pts/3*** 00:00:00 grep --color=auto sobby
chris@lucid:~$ sudo service sobby restart
[sudo] password for chris:
** Stopping sobby********************************************* ********** [ OK ]


** Starting sobby********************************************* ********** [ OK ]
chris@lucid:~$ ps -ef | grep sobby
root***** 5339**** 1* 7 11:45 ?******* 00:00:00 /usr/bin/sobby
chris@lucid:~$


--
Christopher Lemire <christopher.lemire@gmail.com>
Ubuntu 64 bit Linux Raid Level 0


--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

On 06/15/2010 09:47 AM Christopher Lemire scribbled:

> I installed a dedicated Gobby server called sobby. It's running as root.
> That's a very bad idea. Please, somebody sudo apt-get install sobby, and
> tell me if it runs as root.
>
> chris@lucid:~$ ps -ef | grep sobby
> root 1625 1 0 Jun14 ? 00:00:00 /usr/bin/sobby
> chris 5300 8500 0 11:45 pts/3 00:00:00 grep --color=auto sobby
> chris@lucid:~$ sudo service sobby restart
> [sudo] password for chris:
> * Stopping sobby
> [ OK ]
> * Starting sobby
> [ OK ]
> chris@lucid:~$ ps -ef | grep sobby
> root 5339 1 7 11:45 ? 00:00:00 /usr/bin/sobby
> chris@lucid:~$
>
> --
> Christopher Lemire <christopher.lemire@gmail.com
> <mailto:christopher.lemire@gmail.com>>
> Ubuntu 64 bit Linux Raid Level 0
>

New to group and linux in general. In perusing messages, was intrigued
by your subject. Never heard of gobby so started to google.

Don't if related at all but back in 2007, there was a gentoo bug
involving sobby running as root.
Don't know if/how it was resolved but maybe of interest...
http://bugs.gentoo.org/show_bug.cgi?id=171089

Who knows...


--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

On Tue, Jun 15, 2010 at 12:47, Christopher Lemire
<christopher.lemire@gmail.com> wrote:
> I installed a dedicated Gobby server called sobby. It's running as root.
> That's a very bad idea. Please, somebody sudo apt-get install sobby, and
> tell me if it runs as root.

Sure does...

Immediately after installation
bladernr@klaatu:~/.xchat2/xchatlogs$ ps aux |grep sobby
root 13000 0.0 0.0 62828 3588 ? S 17:52 0:00 /usr/bin/sobby

And a restart...
bladernr@klaatu:~/.xchat2/xchatlogs$ sudo service sobby restart
* Stopping sobby

[ OK ]
* Starting sobby

[ OK ]
bladernr@klaatu:~/.xchat2/xchatlogs$ ps aux |grep sobby
root 13555 3.0 0.0 62828 3580 ? S 18:02 0:00 /usr/bin/sobby

so I opened a security bug:
https://bugs.launchpad.net/ubuntu/+source/sobby/+bug/594857

Cheers,
Jeff

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

On Tue 15 Jun 2010 at 18:08:19 -0400, J wrote:

> so I opened a security bug:
> https://bugs.launchpad.net/ubuntu/+source/sobby/+bug/594857

Is sobby being run as daemon?

Debian bug #405915.

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

On Tue, Jun 15, 2010 at 6:48 PM, Brian <ad44@cityscape.co.uk> wrote:


On Tue 15 Jun 2010 at 18:08:19 -0400, J wrote:



> so I opened a security bug:

> https://bugs.launchpad.net/ubuntu/+source/sobby/+bug/594857



Is sobby being run as daemon?



Debian bug #405915.



--

ubuntu-users mailing list

ubuntu-users@lists.ubuntu.com

Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users


yes
--
Christopher Lemire <christopher.lemire@gmail.com>
Ubuntu 64 bit Linux Raid Level 0


--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

>> On Tue 15 Jun 2010 at 18:08:19 -0400, J wrote:
>>
>> > so I opened a security bug:
>> > https://bugs.launchpad.net/ubuntu/+source/sobby/+bug/594857

FWIW, that bug's been updated, and a fix committed upstream to
Debian... check the bug for info.

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Let me know when anybody receives the update. I will also look at the channel log to be certain, and then I will be running a dedicated sobby session


On Sun, Jun 20, 2010 at 12:09 AM, J <dreadpiratejeff@gmail.com> wrote:


>> On Tue 15 Jun 2010 at 18:08:19 -0400, J wrote:
>>
>> > so I opened a security bug:
>> > https://bugs.launchpad.net/ubuntu/+source/sobby/+bug/594857



FWIW, that bug's been updated, and a fix committed upstream to
Debian... check the bug for info.

--



ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users




--
Christopher Lemire <christopher.lemire@gmail.com>
Ubuntu 64 bit Linux Raid Level 0

gpg --recv-keys E13B0909



Key fingerprint = 3E1A 9103 EF3D 4885 6866* E9DE C69F 18B3 E13B 0909

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users