Re: [Cooker] msec fscked me over. good
illogic-al [EMAIL PROTECTED] writes: up until this morning i was happily at msec 4. i changed one of the default settings and now i can't su to root from anywhere. Either in X or at console. Help. I don't wanna reinstall. I have 9.2 btw but once again man prevails over machine! or man prevails over sh ... uh crappy that is, software in this case. Somehow msec decided to change the suid bit on /bin/su Well, it didn't decide that by itself, since su does not feature in the default permissions: well i certainly didn't tell it to. i had no bloody idea what suid bit was or how to set em till today. $ grep su /usr/share/msec/perm.? /usr/share/msec/perm.0:/var/lock/subsys root.root 755 /usr/share/msec/perm.1:/var/lock/subsys root.root 755 /usr/share/msec/perm.2:/var/lock/subsys root.root 755 /usr/share/msec/perm.3:/var/lock/subsys root.root 755 /usr/share/msec/perm.4:/var/lock/subsys root.adm 750 /usr/share/msec/perm.5:/var/lock/subsys root.root 700 that's exactly what mine says check out /etc/security/msec/perm.local also
[Cooker] msec fscked me over. good
up until this morning i was happily at msec 4. i changed one of the default settings and now i can't su to root from anywhere. Either in X or at console. Help. I don't wanna reinstall. I have 9.2 btw -- On his way back from work, a driver came upon a horrible wreck in which one car looked exactly like his neighbor's. Stopping hurriedly on the side of the road, he ran toward the smoldering debris. Listen, mister, a policeman said, holding him back, I can't let you come any closer. But that may be my friend, Henry, in there, the anguished man explained. OK, but it's pretty grisly, the cop cautioned. There was a decapitation. The policeman reached into the back seat of the demolished car and pulled forth the head, holding it at arm's length. Is this your friend? That's not him -- thank heavens, the man said. Henry's much taller.
Re: [Cooker] msec fscked me over. good
On Saturday 25 October 2003 06:14 pm, illogic-al wrote: up until this morning i was happily at msec 4. i changed one of the default settings and now i can't su to root from anywhere. Either in X or at console. Help. I don't wanna reinstall. I have 9.2 btw but once again man prevails over machine! or man prevails over sh ... uh crappy that is, software in this case. Somehow msec decided to change the suid bit on /bin/su i followed the instructions here after some judicious googling: http://www.ornl.gov/cts/archives/mailing-lists/tru64-unix-managers/2003/05/msg00025.html and now i'm back in business. Lesson for the day, DO NOT allow msec to run cron jobs -- There was a young lady who said, As her bridegroom got into the bed, I'm tired of this stunt, That they do with one's cunt, You can get up my bottom instead.
Re: [Cooker] msec fscked me over. good
On Saturday 25 October 2003 06:14 pm, illogic-al wrote: up until this morning i was happily at msec 4. i changed one of the default settings and now i can't su to root from anywhere. Either in X or at console. Help. I don't wanna reinstall. I have 9.2 btw but once again man prevails over machine! or man prevails over sh ... uh crappy that is, software in this case. Somehow msec decided to change the suid bit on /bin/su Well, it didn't decide that by itself, since su does not feature in the default permissions: $ grep su /usr/share/msec/perm.? /usr/share/msec/perm.0:/var/lock/subsys root.root 755 /usr/share/msec/perm.1:/var/lock/subsys root.root 755 /usr/share/msec/perm.2:/var/lock/subsys root.root 755 /usr/share/msec/perm.3:/var/lock/subsys root.root 755 /usr/share/msec/perm.4:/var/lock/subsys root.adm 750 /usr/share/msec/perm.5:/var/lock/subsys root.root 700 i followed the instructions here after some judicious googling: http://www.ornl.gov/cts/archives/mailing-lists/tru64-unix-managers/2003/05/msg00025.html and now i'm back in business. Lesson for the day, DO NOT allow msec to run cron jobs I think you're going to have to look a bit further for that lesson. All my servers run msec 4 with some small customisations, and it's just great IMHO (with msec running from cron). Regards, Buchan
Re: [Cooker] msec fscked me over. good
On Saturday 25 October 2003 07:09 pm, [EMAIL PROTECTED] wrote: On Saturday 25 October 2003 06:14 pm, illogic-al wrote: up until this morning i was happily at msec 4. i changed one of the default settings and now i can't su to root from anywhere. Either in X or at console. Help. I don't wanna reinstall. I have 9.2 btw but once again man prevails over machine! or man prevails over sh ... uh crappy that is, software in this case. Somehow msec decided to change the suid bit on /bin/su Well, it didn't decide that by itself, since su does not feature in the default permissions: well i certainly didn't tell it to. i had no bloody idea what suid bit was or how to set em till today. $ grep su /usr/share/msec/perm.? /usr/share/msec/perm.0:/var/lock/subsys root.root 755 /usr/share/msec/perm.1:/var/lock/subsys root.root 755 /usr/share/msec/perm.2:/var/lock/subsys root.root 755 /usr/share/msec/perm.3:/var/lock/subsys root.root 755 /usr/share/msec/perm.4:/var/lock/subsys root.adm 750 /usr/share/msec/perm.5:/var/lock/subsys root.root 700 that's exactly what mine says i followed the instructions here after some judicious googling: http://www.ornl.gov/cts/archives/mailing-lists/tru64-unix-managers/2003/0 5/msg00025.html and now i'm back in business. Lesson for the day, DO NOT allow msec to run cron jobs I think you're going to have to look a bit further for that lesson. *I* don't have to look a bit further. this did it for me. All my servers run msec 4 with some small customisations, me too. one of the small customizations is not having an hourly cron job run. ever again. and it's just great IMHO (with msec running from cron). Regards, Buchan -- The kings of Peru were the Incas, Who were known far and wide as great drincas. They worshipped the sun And had lots of fun, But the peasants all thought they were stincas.
