Re: setuid and generate-application

Jack Tanner <[email protected]> Wed, 12 Jan 2005 15:44:10 -0500

Newsgroups	gmane.lisp.allegro
Message-ID	<[email protected]>

Kevin Layer wrote:
>>># ./myapp
>>>couldn't open process map file
>>>Unable to locate enough free space to restore C heap
>>>Could not restore the image file:
>>>     /home/luser/myapp/myapp.dxl.
> 
> It would be interesting to see an strace of the above.

Attached. Names have been changed to protect the innocent.

> I thought the "se luser2" would require a login shell and not the "su
> luser2 -c ./myapp" form.

On Fedora Core 2, I get

# su luser2 -c ./myapp
Password:
This account is currently not available.

If I edit /etc/passwd and switch /sbin/nologin for /bin/bash, the app runs.

myapp-strace.txt (text/plain, 6.1 KB)

execve("./myapp-weblink", ["./myapp-weblink"], [/* 28 vars */]) = 0
brk(0)                                  = 0x8050000
fcntl64(0, F_GETFD)                     = 0
fcntl64(1, F_GETFD)                     = 0
fcntl64(2, F_GETFD)                     = 0
access("/etc/suid-debug", F_OK)         = -1 ENOENT (No such file or directory)
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=70252, ...}) = 0
old_mmap(NULL, 70252, PROT_READ, MAP_PRIVATE, 3, 0) = 0xc87000
close(3)                                = 0
open("/lib/tls/libpthread.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`G\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=104308, ...}) = 0
old_mmap(NULL, 70128, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xc9c000
old_mmap(0xcaa000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xd000) = 0xcaa000
old_mmap(0xcac000, 4592, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xcac000
close(3)                                = 0
open("/lib/tls/libm.so.6", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0003\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=213028, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x18d000
old_mmap(NULL, 139424, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x46b000
old_mmap(0x48c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x20000) = 0x48c000
close(3)                                = 0
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\30"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=15008, ...}) = 0
old_mmap(NULL, 12412, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x6b0000
old_mmap(0x6b2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1000) = 0x6b2000
close(3)                                = 0
open("/lib/tls/libc.so.6", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300K\1"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1456128, ...}) = 0
old_mmap(NULL, 1162188, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x732000
old_mmap(0x848000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x116000) = 0x848000
old_mmap(0x84c000, 7116, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x84c000
close(3)                                = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb48000
mprotect(0x848000, 4096, PROT_READ)     = 0
mprotect(0x6b2000, 4096, PROT_READ)     = 0
mprotect(0x48c000, 4096, PROT_READ)     = 0
mprotect(0xcaa000, 4096, PROT_READ)     = 0
mprotect(0xdac000, 4096, PROT_READ)     = 0
set_thread_area({entry_number:-1 -> 6, base_addr:0xb48080, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
munmap(0xc87000, 70252)                 = 0
set_tid_address(0xb480c8)               = 4719
rt_sigaction(SIGRTMIN, {0xca06d0, [], SA_RESTORER|SA_SIGINFO, 0xca7680}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM_INFINITY}) = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0xbffff708, 31, (nil), 0}) = 0
brk(0)                                  = 0x8050000
brk(0x8071000)                          = 0x8071000
brk(0)                                  = 0x8071000
getcwd("/home/luser/ai/delivery-weblink", 1024) = 33
lstat64("/proc/4719/exe", {st_mode=S_IFLNK|0777, st_size=0, ...}) = 0
readlink("/proc/4719/exe", 0xbfffc930, 4095) = -1 EACCES (Permission denied)
getcwd("/home/luser/ai/delivery-weblink", 1024) = 33
stat64("/home/luser/ai/delivery-weblink/myapp-weblink", {st_mode=S_IFREG|S_ISUID|S_ISGID|0754, st_size=34040, ...}) = 0
lstat64("/home/luser/ai/delivery-weblink/myapp-weblink", {st_mode=S_IFREG|S_ISUID|S_ISGID|0754, st_size=34040, ...}) = 0
getcwd("/home/luser/ai/delivery-weblink", 1024) = 33
chdir("/home/luser/ai/delivery-weblink") = 0
getcwd("/home/luser/ai/delivery-weblink", 1024) = 33
chdir("/home/luser/ai/delivery-weblink") = 0
chdir("/home/luser/ai/delivery-weblink") = 0
stat64("/home/luser/ai/delivery-weblink/myapp-weblink.rc", 0xbfffe038) = -1 ENOENT (No such file or directory)
stat64("/home/luser/ai/delivery-weblink/lisprc", 0xbfffe038) = -1 ENOENT (No such file or directory)
access("/home/luser/ai/delivery-weblink/libacli623.so", F_OK) = 0
futex(0x6b3078, FUTEX_WAKE, 2147483647) = 0
open("/home/luser/ai/delivery-weblink/libacli623.so", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300)\2"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=545830, ...}) = 0
old_mmap(NULL, 599167, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x18e000
old_mmap(0x1f9000, 49152, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x6a000) = 0x1f9000
old_mmap(0x205000, 111743, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x205000
close(3)                                = 0
mprotect(0x18e000, 438272, PROT_READ|PROT_WRITE) = 0
mprotect(0x18e000, 438272, PROT_READ|PROT_EXEC) = 0
getcwd("/home/luser/ai/delivery-weblink", 1024) = 33
stat64("/dev/zero", {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 5), ...}) = 0
stat64("/dev/null", {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 3), ...}) = 0
access("/home/luser/ai/delivery-weblink/myapp-weblink.dxl", R_OK) = 0
open("/home/luser/ai/delivery-weblink/myapp-weblink.dxl", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0664, st_size=18710528, ...}) = 0
read(3, "\204\37\1\0l0\0\0 \0\0\0\263\311*q\32 :q\0\0\0\0\0\0\0"..., 104) = 104
open("/proc/4719/maps", O_RDONLY)       = -1 EACCES (Permission denied)
open("/proc/4719/map", O_RDONLY)        = -1 ENOENT (No such file or directory)
write(1, "couldn\'t open process map file\n", 31couldn't open process map file
) = 31
write(1, "Unable to locate enough free spa"..., 53Unable to locate enough free space to restore C heap
) = 53
write(1, "Could not restore the image file"..., 92Could not restore the image file:
    /home/luser/ai/delivery-weblink/myapp-weblink.dxl.
) = 92
exit_group(-1)                          = ?