SUID problems. experts?
Hi. My problems with lprm not working for ordinal users is caused by
another odd problem: suid isn't working for a few programs!
E. g. mmm is a wrapper of mine with a few combined actions for the
normal user. mmm calls just mount/umount/fsck/fdformat/mkfs and so
on, depending on argv[0]. The normal user may call it with m3, u3 ...
Whereas, mount and umount don't work, although the are adorned with
the suid bit.
wehler2@welfa4:~$ strace mmm
execve("/usr/local/bin/mmm", ["mmm"], [/* 33 vars */]) = 0
strace: exec: Operation not permitted
ok, wehler2 must not strace a suid program, as we learn. So, lets
look at the permissions.
==================================================
root@welfa4:/usr/local/bin# ls -dal mmm *mount . [mu][35]
drwxrwxr-x 2 root staff 1024 Dec 20 16:59 .
-rwsr-xr-x 1 root root 5744 Dec 9 22:18 mmm
-rwsr-xr-x 1 root root 29724 Aug 19 04:54 mount
-rwsr-xr-x 1 root root 16228 Aug 19 04:54 umount
lrwxrwxrwx 1 root root 3 Dec 12 16:59 m3 -> mmm
lrwxrwxrwx 1 root root 3 Dec 12 16:59 m5 -> mmm
lrwxrwxrwx 1 root root 3 Dec 12 16:59 u3 -> mmm
lrwxrwxrwx 1 root root 3 Dec 12 16:59 u5 -> mmm
==================================================
mount and umount are exact copies from /bin/*mount, to exclude any
permission problem with directories.
AND NOW this, WHY?!
==================================================
wehler2@welfa4:/usr/local/bin$ ./mount /debian
mount: only root can mount ftp:/ftp/pub/linux/debian on /debian
wehler2@welfa4:/usr/local/bin$
root@welfa4:/usr/local/bin# ./mount /debian
root@welfa4:/usr/local/bin#
wehler2@welfa4:/usr/local/bin$ ./umount /debian
umount: only root can unmount ftp:/ftp/pub/linux/debian from /debian
wehler2@welfa4:/usr/local/bin$
==================================================
Please... I'm at the end now. Mounting isn't my problem, it is only
shown as a test to hopefully some time understand what is going on
here.
Andreas.
--
Uni Wuppertal, FB Elektrotechnik, Tel/Fax: (0202) 439 - 3009
Dr. Andreas Wehler; wehler2@welfa4.elektro.uni-wuppertal.de
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com
Reply to: