Re: checkperms - why suid?

On 18 Dec 2002, Hunter Matthews wrote:

> The feature is VERY beta, and frankly I never anticipated people running
> cadmin as anything but root.
> 
> That may require a rethink if its a common request.

No problem.  I said I was in an "interesting" position.  The issue is
related to having the files on an NFS mounted partition.  There are many
work-arounds that I could use.

Thanks

Bob

> 
> 
> On Tue, 2002-12-17 at 18:35, Bob Van Cleef wrote:
> > 
> > If run as a normal user, cadmin checkperms fails.
> > 
> >             elif type == 'user':
> >                 user = config.cfg.getItem('access_check_arg')
> >                 uid = pwd.getpwnam(user)[2]
> >                 os.setuid(uid)
> > 
> > vancleef [511] > cadmin checkperms
> > This feature is BETA - please notify the list of problems
> > Traceback (innermost last):
> >   File "/usr/sbin/cadmin", line 325, in ?
> >     main()
> >   File "/usr/sbin/cadmin", line 221, in main
> >     os.setuid(uid)
> > OSError: [Errno 1] Operation not permitted
> > 
> > 
> > I am in an interesting place.  The archive of RPM files reside on 
> > a NFS mounted partition.  Therefore, all interaction must be done
> > as a normal user.  This requires a lot of jumping back and forth
> > from root, to do things like start/stop the apache server.
> > 
> > Bob
> > 
> > _______________________________________________
> > Current-server mailing list
> > [email protected]
> > http://lists.dulug.duke.edu/mailman/listinfo/current-server
> > 
> > 
> 

-- 
><>  ><>  ><>  ><>  ><>  ><>  ><>  ><>  ><>  ><>  ><>  ><>  ><>
Bob Van Cleef, System Administrator         (408) 734-8100 x271
MicroUnity, Inc.                             FAX (408) 734-8136
376 Martin Ave., Santa Clara, CA 95050  [email protected]