Project

General

Profile

Actions
Copy link

Regression #15992

closed

PHP Shell Permission Issue for User After Upgrade from 23.03 to 23.11

Added by Abdallah Musa 8 months ago. Updated 8 months ago.

Status:
Rejected
Priority:
Low
Assignee:
-
Category:
User Manager / Privileges
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Release Notes:
Default
Affected Plus Version:
24.11
Affected Architecture:

Description

Hi

Description:
After upgrading from pfSense version 23.04 to 24.11, I encountered an issue where the nagios user, which is part of the admins group, is unable to execute certain commands as expected.

Steps to Reproduce:

In version 23.04, run the following commands:

[24.03-RELEASE][]/root: su nagios
[24.03-RELEASE][]/root: /usr/local/sbin/pfSsh.php playback svc status openvpn server 1

Service openvpn is running.

After upgrading to version 24.11, repeat the same commands:

[24.11-RELEASE][]/root: su nagios
[24.11-RELEASE][]/root: /usr/local/sbin/pfSsh.php playback svc status openvpn server 1
pkill: signalling pid 92034: Operation not permitted
pkill: signalling pid 13626: Operation not permitted
pkill: signalling pid 72460: Operation not permitted
pkill: signalling pid 43433: Operation not permitted
pkill: signalling pid 59628: Operation not permitted
pkill: signalling pid 59628: Operation not permitted

Service openvpn is stopped.

Impact:
The nagios user can no longer perform actions on pfSsh.php, it was able to prior to the upgrade, indicating a potential regression in permission handling for users in the admins group.

Request:
Please investigate and resolve this regression to restore expected functionality for users in the admins group.

Actions
Copy link

Also available in: Atom PDF