[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#835516: General: Incorrect permissions on /bin for Debian Jessie



El sábado 27 de agosto del 2016 a las 19:59:32 +0200,
Hans escribió:

> Hello all!

Hello, Hans!

> What is correct? 755 or 775? I have 775, and I did install from the DVD 
> (however, about 7 years ago!).
> 
> I never changed any permissions manually, so I believe, this settings are now 
> for a loooooooong time.

I think 755 should be right. At least 775 seems not work with Jailkit by
be considered a security breach as I see in the log:

-----------------------------------------------------------------------
Jun 27 15:37:57 ispconfig jk_chrootsh[19240]: path /var/www/clients/client1/web7/bin/ is group writable
Jun 27 15:37:57 ispconfig jk_chrootsh[19240]: abort, /var/www/clients/client1/web7 is not a safe jail, check ownership and permissions.
-----------------------------------------------------------------------

I think when you create a new user with Jailkit, this is based on the
/bin directory with the permissions that it has in the base system, and
Jailkit copies it into the home for the chrooted user maintaining the
same permissions. But when a chrooted user wants to log in, s/he is
unable to do so due to the security breach registered you can see in the
log that I copied above.

What led me to think that maybe we could have a bug on the Debian
permissions for /bin.


Kind regards,

-- 
Ing. Daniel Bareiro

Opción Libre - Soberanía tecnológica para su empresa
WWW: http://www.opcion-libre.com.ar
Tel: +54 11 5235-3090
Correo-e: contacto@opcion-libre.com.ar

Attachment: signature.asc
Description: Digital signature


Reply to: