Kern,
This sounds like a bug in the source?
-----Original Message-----
From: Josh Fisher <[email protected]>
Date: Tue, 04 May 2010 11:32:44
To: Scott Barninger<[email protected]>
Cc: Kern Sibbald<[email protected]>;
Bacula-Devel<[email protected]>
Subject: Re: [Bacula-devel] [bacula 0001571]: libraries permissions are too
restrictive, breaks notification by mail and running bat as unprivileged
user
On 5/3/2010 7:41 PM, Scott Barninger wrote:
> Hello Kern,
>
> How very odd. I don't "think" I did anything between 5.0.1 and 5.0.2 to change
> permissions. They should be whatever the makefile sets them to. I merely put
> them in a separate package:
>
> %files libs
> %defattr(-,root,root)
> %{_libdir}/libbac*
> %{_libdir}/libbaccfg*
> %{_libdir}/libbacfind*
> %{_libdir}/libbacpy*
>
> This is unchanged as far as I know back to 3.0. Also very odd that this bug is
> filed against 5.0.2 but the error referred to is libbac-5.0.1-so??? On my not
> upgraded 5.0.1 installation I have with no problem:
> -rwxr-xr-- 1 root root 311360 2010-02-25 13:21 /usr/lib/libbac-5.0.1.so
>
I can confirm this. I built RPMS for Fedora 11 from
bacula-5.0.2-1.src.rpm and updated a 3.0.3 install using:
rpm -U bacula-mysql-5.0.2-1.x86_64.rpm bacula-libs-5.0.2-1.x86_64.rpm
This apparently resulted in an install of 5.0.1 libbac* files. There
were no 5.0.2 libbac* files installed. Permissions for libbac* were set to:
-rwxr-x--- 1 root root 335200 2010-05-03 12:42 libbac-5.0.1.so
Daemons work just fine, though they are not running as root. I think
that is because the libraries are loaded as root before switching users
when the daemon is started. However, when /usr/sbin/bsmtp is invoked as
user 'bacula', it doesn't have permissions to load libbac* files, so
fails. Also cannot run bsmtp from the command line unless running as root.
I can confirm that changing the permissions for libbac* to 0755 fixes
the problem. Do you know of any reason the libraries should not be world
read/execute?
> Is it possible the user missed the release note about the new bacula-libs
> package and has upgraded all but that?? I have added a note to the bug report
> to that effect.
>
Not in my case, as I upgraded from 3.0.3. The
bacula-libs-5.0.2-1.x86_64.rpm generated from bacula-5.0.2-1.src.rpm for
Fedora 11 definitely installs libbac-5.0.1.so, libbaccfg-5.0.1.so, etc.
The filenames, at least, indicate version 5.0.1, though they were
generated from the 5.0.2 SRPM.
> On Monday 03 May 2010 06:24:44 pm you wrote:
>
>> The following issue has been SUBMITTED.
>> ======================================================================
>> http://bugs.bacula.org/view.php?id=1571
>> ======================================================================
>> Reported By: Andreas Piesk
>> Assigned To: barninger
>> ======================================================================
>> Project: bacula
>> Issue ID: 1571
>> Category: rpms
>> Reproducibility: always
>> Severity: major
>> Priority: normal
>> Status: assigned
>> ======================================================================
>> Date Submitted: 2010-05-03 23:24 BST
>> Last Modified: 2010-05-03 23:24 BST
>> ======================================================================
>> Summary: libraries permissions are too restrictive,
>> breaks notification by mail and running bat as unprivileged user
>> Description:
>> the permissions 0750 are too restrictive for the director:
>>
>> May 3 23:09:32 pyramid bacula-dir: 03-May 23:09 Message delivery ERROR:
>> Mail prog: /usr/sbin/bsmtp: error while loading shared libraries:
>> libbac-5.0.1.so: cannot open shared object file: Permission denied
>>
>> and for bat, which i can no longer start as unprivileged user. changing the
>> permissions to 0755 solves the issue.
>> ======================================================================
>>
>> Issue History
>> Date Modified Username Field Change
>> ======================================================================
>> 2010-05-03 23:24 Andreas Piesk New Issue
>> 2010-05-03 23:24 Andreas Piesk Status new => assigned
>> 2010-05-03 23:24 Andreas Piesk Assigned To => barninger
>> ======================================================================
>>
> ------------------------------------------------------------------------------
> _______________________________________________
> Bacula-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/bacula-devel
>
------------------------------------------------------------------------------
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel
