← Back to team overview

ubuntu-eee-coders team mailing list archive

[Bug 286465] Re: Lots of wrong permissions or missing setuid, setgid: /dev/fuse, unix_chkpwd, passwd, mount, ping, ...

 

** Summary changed:

- Lots of wrong permissions or missing setuid,setgid: /dev/fuse, unix_chkpwd, passwd, mount, ...
+ Lots of wrong permissions or missing setuid,setgid: /dev/fuse, unix_chkpwd, passwd, mount, ping, ...

** Description changed:

  A lot of permissions seem to have been lost when packaging ubuntu-eee.
  
  The ones i hit:
  /dev/fuse -> https://bugs.launchpad.net/ubuntu-eee/+bug/266883
  unix_chkpwd -> https://bugs.launchpad.net/ubuntu-eee/+bug/261497
  passwd -> https://bugs.launchpad.net/ubuntu-eee/+bug/271111
  mount (wrong group, missing SGID)
+ ping (normal users can't use ping: "ping: icmp open socket: Operation not permitted")
+ pppd (normal users can't use pppd despite being in the dip group)
  
  --------------------------------------------------------------------------------
- Collection of fixes:
+ Collection of fixes (these modify the permissions to be like on regular ubuntu):
  
  sudo chown root:shadow /sbin/unix_chkpwd
  sudo chmod 2755 /sbin/unix_chkpwd
- sudo chmod +x /dev/fuse
+ sudo chgrp fuse /dev/fuse
+ sudo chmod 660 /dev/fuse
  sudo chmod u+s /bin/mount
  sudo chmod u+s /usr/bin/passwd
+ sudo chmod u+s /bin/ping
+ sudo chgrp dip /usr/sbin/pppd
+ sudo chmod u+s,g+x /usr/sbin/pppd

-- 
Lots of wrong permissions or missing setuid,setgid: /dev/fuse, unix_chkpwd, passwd, mount, ping, ...
https://bugs.launchpad.net/bugs/286465
You received this bug notification because you are a member of Ubuntu
Eee Coders, which is subscribed to Ubuntu Eee.

Status in Ubuntu Eee: Confirmed

Bug description:
A lot of permissions seem to have been lost when packaging ubuntu-eee.

The ones i hit:
/dev/fuse -> https://bugs.launchpad.net/ubuntu-eee/+bug/266883
unix_chkpwd -> https://bugs.launchpad.net/ubuntu-eee/+bug/261497
passwd -> https://bugs.launchpad.net/ubuntu-eee/+bug/271111
mount (wrong group, missing SGID)
ping (normal users can't use ping: "ping: icmp open socket: Operation not permitted")
pppd (normal users can't use pppd despite being in the dip group)

--------------------------------------------------------------------------------
Collection of fixes (these modify the permissions to be like on regular ubuntu):

sudo chown root:shadow /sbin/unix_chkpwd
sudo chmod 2755 /sbin/unix_chkpwd
sudo chgrp fuse /dev/fuse
sudo chmod 660 /dev/fuse
sudo chmod u+s /bin/mount
sudo chmod u+s /usr/bin/passwd
sudo chmod u+s /bin/ping
sudo chgrp dip /usr/sbin/pppd
sudo chmod u+s,g+x /usr/sbin/pppd



References