pcp
[Top] [All Lists]

Re: Installing files/dirs as non-root:root user and group

To: Dave Brolley <brolley@xxxxxxxxxx>
Subject: Re: Installing files/dirs as non-root:root user and group
From: Nathan Scott <nathans@xxxxxxxxxx>
Date: Sun, 23 Jun 2013 18:58:49 -0400 (EDT)
Cc: pcp@xxxxxxxxxxx
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <51C46ABD.4080307@xxxxxxxxxx>
References: <698020944.4509484.1371683485976.JavaMail.root@xxxxxxxxxx> <51C35A06.6050909@xxxxxxxxxx> <1097929496.5228235.1371765651634.JavaMail.root@xxxxxxxxxx> <51C46ABD.4080307@xxxxxxxxxx>
Reply-to: Nathan Scott <nathans@xxxxxxxxxx>
Thread-index: NGk9Y5iDkP6/EiwpR1C34KxbMqUNRA==
Thread-topic: Installing files/dirs as non-root:root user and group
Hi Dave,

----- Original Message -----
> Thanks Nathan,
> 
> I'll make the suggested changes and do some testing over the weekend.
> 
> Dave
> 
> On 06/20/2013 06:00 PM, Nathan Scott wrote:
> > With the makefile fix, this should be able to move up within the "if"
> > branch. The chmod looks fishy - needs to be "775" I think? (and I'd do
> > that within the mkdir still via the -m option).
> I had 775 originally, but qa test 023 (probably among others) was still
> failing. It starts pmcd in the foreground as the user running the test
> (brolley in my case). This resulted in EACCESS when pmcd attempted to
> bind to the socket. The bind(3) man page told me that write access to
> the directory is required. Changing it to 777 fixed the problem.
> 

Ah - might be a case for the environment variable you mentioned adding in
earlier posts; env vars can be handy in qa as older versions ignore them,
unlike a command line arg, and newer versions happily proceed using socket
file in some alternate, user-writable location.

777 would mean any malicious local user could remove the pmcd socket file
from the rundir.

cheers.

--
Nathan

<Prev in Thread] Current Thread [Next in Thread>