[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#835516: General: Incorrect permissions on /bin for Debian Jessie



Hi, Santiago. Thanks for your reply.

El sábado 27 de agosto del 2016 a las 12:07:58 +0200,
Santiago Vila escribió:

> It would be a bug, yes, but that's not a change that we made.
> 
> A standard install of Debian jessie is usually made by a program
> called debian-installer. This program runs from a bootable USB stick
> (or from optical media) and uses a program called debootstrap to
> install a minimal Debian system in the partition which will become the
> root partition.
> 
> One of the very first packages that debootstrap installs is base-files,
> which contains an empty usr/bin with correct persmissions. You can
> check this by downloading the .deb package from any mirror:
> 
> # dpkg -c base-files_8+deb8u5_amd64.deb | grep usr/bin
> drwxr-xr-x root/root         0 2016-05-30 06:18 ./usr/bin/

Thanks for the observations. I thought maybe this could be related to
debootstrap, but I was not sure.

Below I have made a comparison of the base-files package on two
containers LXC I created from scratch for the purposes of these tests:

root@sirius:~# lxc-ls --fancy | egrep "jessie|wheezy"
jessietest  RUNNING  10.1.0.49  -     NO         
wheezytest  RUNNING  10.1.0.32  -     NO

------------------------------------------------------------------------
root@jessietest:~# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 8.5 (jessie)
Release:        8.5
Codename:       jessie
------------------------------------------------------------------------
root@jessietest:~# dpkg -c /var/cache/apt/archives/base-files_8+deb8u5_amd64.deb | grep /bin
drwxr-xr-x root/root         0 2016-05-30 01:18 ./bin/
drwxr-xr-x root/root         0 2016-05-30 01:18 ./usr/bin/
------------------------------------------------------------------------
root@jessietest:~# ls -ld /bin/
drwxr-xr-x 2 root root  4096 ago 27 10:51 /bin/
========================================================================
root@wheezytest:~# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 7.11 (wheezy)
Release:        7.11
Codename:       wheezy
------------------------------------------------------------------------
root@wheezytest:~# dpkg -c /var/cache/apt/archives/base-files_7.1wheezy11_amd64.deb | grep /bin
drwxr-xr-x root/root         0 2016-05-30 01:13 ./bin/
drwxr-xr-x root/root         0 2016-05-30 01:13 ./usr/bin/
------------------------------------------------------------------------
root@wheezytest:~# ls -ld /bin/
drwxr-xr-x 2 root root  4096 ago 27 09:02 /bin/
------------------------------------------------------------------------

It is interesting to see that in these installations created with the
following syntax:

# lxc-create -n $lxcname -B lvm --vgname=vms --lvname=$lxcname-disk --fssize=8G --fstype=ext4 -t debian -- -r wheezy
# lxc-create -n $lxcname -B lvm --vgname=vms --lvname=$lxcname-disk --fssize=8G --fstype=ext4 -t debian -- -r jessie

the permissions are correct. But if I do the same check on this
notebook installed using the netinstall CD, permissions are not 755 but
775:

viper@orion:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 8.5 (jessie)
Release:        8.5
Codename:       jessie

viper@orion:~$ ls -ld /bin/
drwxrwxr-x 2 root root 4096 jul  9 09:06 /bin/


Here I find a pattern, since the difference of permissions mentioned in
the previous mail was found in a KVM virtual machine installed using the
netinstall CD.

But I have checked in other Jessie virtual machines and permissions are
755. So I'm not sure what can be introducing this difference.

I just installed Jessie using the latest version of netinstall I have
(debian-8.1.0-amd64-netinst.iso) and I can confirm here that /bin has
permissions 775. So it may be that the problem comes from that side...

Could you please confirm this? Anyway, I will try to make a test with
the latest version of netinstall.

> I don't know what exactly jailkit does to create a chroot, but since
> AFAIK it's not packaged for Debian jessie, this could not be a bug
> in the Debian distribution at all.
> 
> Please tell us a step by step recipe to reproduce this problem (not
> just what you remember doing the last time, but something that works
> when you start from scratch) and why do you think it is a bug in the
> Debian distribution and maybe we could help.

I think jailkit fails when copy /bin using 775 from the base
installation. I will try testing with Jessie netinstall 8.5 to see if we
can isolate the source of the problem.


Kind regards,
Daniel
-- 
Ing. Daniel Bareiro

Opción Libre - Soberanía tecnológica para su empresa
WWW: http://www.opcion-libre.com.ar
Tel: +54 11 5235-3090
Correo-e: contacto@opcion-libre.com.ar

Attachment: signature.asc
Description: Digital signature


Reply to: