[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: setuid question



On Fri, Jan 22, 2021 at 5:13 PM Gene Heskett <gheskett@shentel.net> wrote:
>
> On Friday 22 January 2021 19:17:13 Larry Martell wrote:
>
> > On Fri, Jan 22, 2021 at 4:09 PM Gene Heskett <gheskett@shentel.net>
> wrote:
> > > On Friday 22 January 2021 18:35:27 David Christensen wrote:
> > > >  chmod u+s /usr/local/libexec/amanda/ambind
> > >
> > > root@coyote:amanda-3.5.1$ chmod u+s /usr/local/libexec/amanda/ambind
> > > root@coyote:amanda-3.5.1$ su amanda -c "/usr/local/sbin/amcheck
> > > Daily" Amanda Tape Server Host Check
> > > -----------------------------
> > > ERROR: program /usr/local/libexec/amanda/ambind: not setuid-root
> > > NOTE: Holding disk '/sdb/dumps': 212792 MB disk space available,
> > > using 212292 MB
> > > Searching for label 'Dailys-3':found in slot 3: volume 'Dailys-3'
> > > Will write to volume 'Dailys-3' in slot 3.
> > > NOTE: skipping tape-writable test
> > > Server check took 0.103 seconds
> > > Amanda Backup Client Hosts Check
> > > --------------------------------
> > > ERROR: coyote: selfcheck request failed: ambind: bind failed A:
> > > Permission denied
> > > ERROR: shop: selfcheck request failed: ambind: bind failed A:
> > > Permission denied
> > > ERROR: lathe: selfcheck request failed: ambind: bind failed A:
> > > Permission denied
> > > ERROR: GO704: selfcheck request failed: ambind: bind failed A:
> > > Permission denied
> > > ERROR: rpi4: selfcheck request failed: ambind: bind failed A:
> > > Permission denied
> > > Client check: 5 hosts checked in 11.298 seconds.  5 problems found.
> > >
> > > Next?
> >
> > Is ambind owned by root?
>
> It was at install but I'd already fixed that with a root:
> chown amanda:backup /usr/llocal/libexec/amanda/ambind, which shows
> correctly now.
>
> And I found everything just reinstalled is now owned by root:staff, but
> fixing that doesn't change a thing? What the hell?

The error is not setuid-root, so you need to chown root to it, not
chown amanda:backup


Reply to: