🚀 go-pugleaf

On <Wed, 6 Dec 1995 12:53:25 GMT> Maciej Filipiak (fili...@pipeta.chemia.pk.edu.pl) wrote:



> Co ciekawsze, dzieje sie to tylko z poziomu urzytkownika, jako root
> jest wszystko ok.
> a jeszcze ciekawsze jest to, ze prawa zapisu do powstalego pliku
> /tmp/.user.pop sa dal usera ustawione prawidlowo.

Przypadek z pop3 udalo mi sie uogolnic do nastepujacych problemow:

	* z poziomu roota podczas wywolania polecenia "su jakis_user"
	  wyskakuje blad "cannot execute /bin/tcsh". oczywiscie  sam
	   /bin/tcsh ma wlasnosc i przywileje ustawione prawidlowo.
	  strace pokazuje nstepujace rzeczy:

*******************************************************************
setgid(200)                             = 0
setuid(485)                             = 0
execve("/bin/tcsh", ["tcsh"], [25 vars]) = -1 EACCES (Permission denied)
stat("/etc/locale/C/libc.cat", 0xbffff000) = -1 EACCES (Permission denied)
stat("/usr/lib/locale/C/libc.cat", 0xbffff000) = -1 EACCES (Permission denied)
stat("/usr/lib/locale/libc/C/usr/share/locale/C/libc.cat", 0xbffff000) = -1 EACCES (Permission denied)
stat("/usr/local/share/locale/C/libc.cat", 0xbffff000) = -1 EACCES (Permission denied)
write(2, "Cannot execute /bin/tcsh: Permis"..., 44Cannot execute /bin/tcsh: Permission denied
) = 44
*******************************************************************

	* drugi problem odkrylem calkiem przypadkowo: podczas wywolania
          "atq".  

******************************************************************
setreuid(0, 0)                          = 0
setregid(0, 0)                          = 0
brk(0x8000)                             = 0x8000
stat("/etc/locale/C/libc.cat", 0xbffff828) = -1 ENOENT (No such file or directory)
stat("/usr/lib/locale/C/libc.cat", 0xbffff828) = -1 ENOENT (No such file or directory)
stat("/usr/lib/locale/libc/C/usr/share/locale/C/libc.cat", 0xbffff828) = -1 ENOENT (No such file or directory)
stat("/usr/local/share/locale/C/libc.cat", 0xbffff828) = -1 ENOENT (No such file or directory)
setreuid(0, 0)                          = 0
setregid(0, 0)                          = 0
setregid(1, 0)                          = 0
setreuid(1, 0)                          = 0
setreuid(0, 1)                          = 0
setregid(0, 1)                          = 0
chdir("/var/spool/atjobs/")             = -1 EACCES (Permission denied)
write(2, "Cannot change to /var/spool/atjo"..., 55Cannot change to /var/spool/atjobs/: Permission denied
) = 55
********************************************************************

Czy komus cos to mowi?

--
Pawel Krawczyk,   email:  krav...@labs.oeto.pk.edu.pl,  FidoNet: 2:486/18.4 
email: krav...@pipeta.chemia.pk.edu.pl, Location: Cracow, Poland,  PGP  key
available on finger, ftp://149.156.137.250/pub/pgp, /pub/misc - phun stuph