[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug in mediathekview?



On Wed, Jul 02, 2014 at 10:29:35PM +0200, Hans wrote:
> strace -f dpkg --print-architecture
> execve("/usr/bin/dpkg", ["dpkg", "--print-architecture"], [/* 46 vars */]) = 
> -1 EACCES (Permission denied)

Ouch. This means that user cannot execute dpkg itself.

> ls -la /usr/bin/dpkg
> -rwxr-x--- 1 root root 265840 Jun  5 21:26 /usr/bin/dpkg

And this proves it. This is definitely wrong, anyone should be able to
execute dpkg.

BTW, to check 'stock' file permissions that should be set on a package
install, one can use dpkg-deb. In this case:

$ aptitude download dpkg
Get: 1 http://security.debian.org/ wheezy/updates/main dpkg i386 1.16.15 [2,637 kB]
Fetched 2,637 kB in 2s (932 kB/s)

$ dpkg-deb -c dpkg_1.16.15_i386.deb | grep dpkg$
-rwxr-xr-x root/root    260208 2014-06-06 02:17 ./usr/bin/dpkg
-rw-r--r-- root/root       445 2014-06-06 00:01 ./usr/share/lintian/overrides/dpkg
-rw-r--r-- root/root       232 2014-06-06 02:17 ./etc/logrotate.d/dpkg
-rwxr-xr-x root/root       256 2014-06-06 02:17 ./etc/cron.daily/dpkg

Reco


Reply to: