[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

group execute permissions wrong on some executables



for knoppix4.0.1, some of the file permissions are wrong for cdrecord
and other programs.  the effective result is that, when you startup k3b,
it complains that it cant find cdrecord, cdda2wav and (I think) a couple
of other programs).

The source of the problem is that these programs (and a number of others)
are setgid cdrom, but not permitted execute to that group.  Since knoppix
is a member of group cdrom (and a horde of others), it is unable to use
these programs.

The problem is shown in the listing below, by the capital S in the
group-execute of the ls -l output.

When I did a find to look off other similarly situated programs i found a
number with questionable permissions -- The most obvious of which is {ch,}mpqcval
which have no execute bits set at all.

I'm not absolutely sure that the others should be execute all, but
given that they're in /usr/bin, I think so... If somebody who knows
what was trying to be done with the permissions of these programs
could reply to this, I can get a better idea as to what the proper
permissions should be.

Definitely the sgid cdrom programs should be permitted execute group.
It actually makes NO sense to thave them the way that they are.



knoppix@1[bin]$ find . ! -perm -0111 -ls
  6228  263 -rwxr-Sr-x   1 root     cdrom      268564 Aug 12 21:21 ./cdda2wav
  6231   31 -rwxr-Sr-x   1 root     cdrom       31128 Feb 29  2004 ./cdparanoia
  5860  554 -rwxr-Sr-x   1 root     cdrom      566344 Jun 24  2004 ./cdrdao
   930    1 -rwxr-Sr-x   1 root     cdrom         133 Aug 12 21:21 ./cdrecord
  5861  344 -rwxr-Sr-x   1 root     cdrom      351316 Aug 12 21:21 ./cdrecord.mmap
  6232  344 -rwxr-Sr-x   1 root     cdrom      351316 Aug 12 21:21 ./cdrecord.shm
  6262   14 -rw-r--r--   1 root     root        13701 May  8 05:42 ./chkmpqcval
  6853   17 -rwsr-xr--   1 root     fuse        16856 Aug  6 09:21 ./fusermount
  7361   11 -rwsr-x---   1 root     video       10440 Jun 12 12:35 ./i810switch
  7482   13 -rwsr-xr--   1 root     audio       12704 Feb 20  2005 ./jackstart
  7722  566 -rwsr-xr--   1 root     dip        579192 Jun  1 04:41 ./kppp
  7723  104 -rwxr-xr--   1 root     dip        105720 Jun  1 04:41 ./kppplogview
  8143    2 -rw-r--r--   1 root     root         1485 May  8 05:42 ./mpqcval
  8603   27 -rwsr-xr--   1 root     plugdev     26680 May 18 06:47 ./pmount
  8814   19 -rwsr-xr--   1 root     plugdev     19096 May 18 06:47 ./pumount
  5864  156 -rws--x---   1 root     cdrom      159284 Aug 12 21:21 ./readcd


chmod g+x /usr/bin/{cdda2wav,cdparanoia,cdrdao,cdrecord,cdrecord.mmap,cdrecord.shm}

chmod a+x /usr/bin/{chkmpqcval,mpqcval}

appropriate=true
if $appropriate ; then
  chmod a+x /usr/bin/{fusermount,i810switch,jackstart,kppp,kppplogview,pmount,pumount,readcd}
fi

--
Stephen Samuel +1(604)876-0426                samuel@bcgreen.com
                   http://www.bcgreen.com/~samuel/
   Powerful committed communication. Transformation touching
     the jewel within each person and bringing it to light.



Reply to: