Re: checkperms - why suid?

Hunter Matthews <[email protected]> 18 Dec 2002 13:13:11 -0500
Newsgroups gmane.network.up2date.current.devel
Message-ID <[email protected]>
The feature is VERY beta, and frankly I never anticipated people running
cadmin as anything but root.

That may require a rethink if its a common request.



On Tue, 2002-12-17 at 18:35, Bob Van Cleef wrote:
> 
> If run as a normal user, cadmin checkperms fails.
> 
>             elif type == 'user':
>                 user = config.cfg.getItem('access_check_arg')
>                 uid = pwd.getpwnam(user)[2]
>                 os.setuid(uid)
> 
> vancleef [511] > cadmin checkperms
> This feature is BETA - please notify the list of problems
> Traceback (innermost last):
>   File "/usr/sbin/cadmin", line 325, in ?
>     main()
>   File "/usr/sbin/cadmin", line 221, in main
>     os.setuid(uid)
> OSError: [Errno 1] Operation not permitted
> 
> 
> I am in an interesting place.  The archive of RPM files reside on 
> a NFS mounted partition.  Therefore, all interaction must be done
> as a normal user.  This requires a lot of jumping back and forth
> from root, to do things like start/stop the apache server.
> 
> Bob
> 
> _______________________________________________
> Current-server mailing list
> [email protected]
> http://lists.dulug.duke.edu/mailman/listinfo/current-server
> 
> 
-- 
Hunter Matthews                          Unix / Network Administrator
Office: BioScience 145/244               Duke Univ. Biology Department
Key: F0F88438 / FFB5 34C0 B350 99A4 BB02  9779 A5DB 8B09 F0F8 8438
Never take candy from strangers. Especially on the internet.