Bug#326001: cups-pdf: [NFS] mkdir: cannot create directory `/home/ANONYMOUS': Permission denied

2005-09-01 Thread Jari Aalto
Package: cups-pdf
Version: 1.7.3-3
Severity: normal

The /home directory can be NFS mounted and may cause following error.
directly. Please take a look.

   # mount | grep /home
   # server:/home on /home type nfs 
(rw,noatime,rsize=8192,wsize=8192,hard,intr,bg,addr=192.168.1.2)


Install these packages without verification [y/N]? y
Get:1 http://deb unstable/main cups-pdf 1.7.3-4 [17.4kB]
Fetched 17.4kB in 1s (9535B/s)
(Reading database ... 139867 files and directories currently installed.)
Preparing to replace cups-pdf 1.7.3-3 (using .../cups-pdf_1.7.3-4_i386.deb) ...
mkdir: cannot create directory `/home/ANONYMOUS': Permission denied
dpkg: error processing /var/cache/apt/archives/cups-pdf_1.7.3-4_i386.deb 
(--unpack):
 subprocess pre-installation script returned error exit status 1
Errors were encountered while processing:
 /var/cache/apt/archives/cups-pdf_1.7.3-4_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ISO-8859-1) (ignored: LC_ALL set to en_US)

Versions of packages cups-pdf depends on:
ii  cupsys1.1.23-12  Common UNIX Printing System(tm) - 
ii  gs-esp8+8.15rc4.dfsg.1-2 The Ghostscript PostScript interpr
ii  libc6 2.3.5-6GNU C Library: Shared libraries an

cups-pdf recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#326001: cups-pdf: [NFS] mkdir: cannot create directory `/home/ANONYMOUS': Permission denied

2005-09-01 Thread Volker Christian Behr
This looks to me as if the home was exported with root_squash from the
server. This will make cups-pdf fail in any case since it uses /home as
output directory on Debian. 
Martin-Éric - is it possible for the installation to check this and
issue an warning?

Volker

On Thu, 2005-09-01 at 08:53, Jari Aalto wrote:
 Package: cups-pdf
 Version: 1.7.3-3
 Severity: normal
 
 The /home directory can be NFS mounted and may cause following error.
 directly. Please take a look.
 
# mount | grep /home
# server:/home on /home type nfs 
 (rw,noatime,rsize=8192,wsize=8192,hard,intr,bg,addr=192.168.1.2)
 
 
 Install these packages without verification [y/N]? y
 Get:1 http://deb unstable/main cups-pdf 1.7.3-4 [17.4kB]
 Fetched 17.4kB in 1s (9535B/s)
 (Reading database ... 139867 files and directories currently installed.)
 Preparing to replace cups-pdf 1.7.3-3 (using .../cups-pdf_1.7.3-4_i386.deb) 
 ...
 mkdir: cannot create directory `/home/ANONYMOUS': Permission denied
 dpkg: error processing /var/cache/apt/archives/cups-pdf_1.7.3-4_i386.deb 
 (--unpack):
  subprocess pre-installation script returned error exit status 1
 Errors were encountered while processing:
  /var/cache/apt/archives/cups-pdf_1.7.3-4_i386.deb
 E: Sub-process /usr/bin/dpkg returned an error code (1)
 
 -- System Information:
 Debian Release: testing/unstable
   APT prefers unstable
   APT policy: (500, 'unstable')
 Architecture: i386 (i686)
 Shell:  /bin/sh linked to /bin/bash
 Kernel: Linux 2.6.12-1-686
 Locale: LANG=C, LC_CTYPE=C (charmap=ISO-8859-1) (ignored: LC_ALL set to en_US)
 
 Versions of packages cups-pdf depends on:
 ii  cupsys1.1.23-12  Common UNIX Printing System(tm) 
 - 
 ii  gs-esp8+8.15rc4.dfsg.1-2 The Ghostscript PostScript 
 interpr
 ii  libc6 2.3.5-6GNU C Library: Shared libraries 
 an
 
 cups-pdf recommends no packages.
 
 -- no debconf information
-- 

Volker Christian Behr
Experimentelle Physik V (Biophysik), Physikalisches Institut
Universitaet Wuerzburg, Am Hubland, 97074 Wuerzburg, Germany

Office: Room F-069a
+49-931-888-5766 (phone)
+49-931-888-5851 (fax)




Bug#326001: cups-pdf: [NFS] mkdir: cannot create directory `/home/ANONYMOUS': Permission denied

2005-09-01 Thread Jari Aalto
| This looks to me as if the home was exported with root_squash from the
| server. This will make cups-pdf fail in any case since it uses /home as
| output directory on Debian.=20
| Martin-=C9ric - is it possible for the installation to check this and
| issue an warning?

Correct. Root has no permission remotedly, but he must log into the
machine who provides the shares. This is security issue, where
root exploit in some machine does not gain further privileges.

Jari

| 
| On Thu, 2005-09-01 at 08:53, Jari Aalto wrote:
|  Package: cups-pdf
|  Version: 1.7.3-3
|  Severity: normal
| =20
|  The /home directory can be NFS mounted and may cause following error.
|  directly. Please take a look.
| =20
| # mount | grep /home
| # server:/home on /home type nfs (rw,noatime,rsize=3D8192,wsize=3D81=
| 92,hard,intr,bg,addr=3D192.168.1.2)
| =20
| =20
|  Install these packages without verification [y/N]? y
|  Get:1 http://deb unstable/main cups-pdf 1.7.3-4 [17.4kB]
|  Fetched 17.4kB in 1s (9535B/s)
|  (Reading database ... 139867 files and directories currently installed.=
| )
|  Preparing to replace cups-pdf 1.7.3-3 (using .../cups-pdf_1.7.3-4_i386.=
| deb) ...
|  mkdir: cannot create directory `/home/ANONYMOUS': Permission denied
|  dpkg: error processing /var/cache/apt/archives/cups-pdf_1.7.3-4_i386.de=
| b (--unpack):
|   subprocess pre-installation script returned error exit status 1
|  Errors were encountered while processing:
|   /var/cache/apt/archives/cups-pdf_1.7.3-4_i386.deb
|  E: Sub-process /usr/bin/dpkg returned an error code (1)
| =20
|  -- System Information:
|  Debian Release: testing/unstable
|APT prefers unstable
|APT policy: (500, 'unstable')
|  Architecture: i386 (i686)
|  Shell:  /bin/sh linked to /bin/bash
|  Kernel: Linux 2.6.12-1-686
|  Locale: LANG=3DC, LC_CTYPE=3DC (charmap=3DISO-8859-1) (ignored: LC_ALL =
| set to en_US)
| =20
|  Versions of packages cups-pdf depends on:
|  ii  cupsys1.1.23-12  Common UNIX Printing Syste=
| m(tm) -=20
|  ii  gs-esp8+8.15rc4.dfsg.1-2 The Ghostscript PostScript=
|  interpr
|  ii  libc6 2.3.5-6GNU C Library: Shared libr=
| aries an
| =20
|  cups-pdf recommends no packages.
| =20
|  -- no debconf information
| --=20
| 
| Volker Christian Behr
| Experimentelle Physik V (Biophysik), Physikalisches Institut
| Universitaet Wuerzburg, Am Hubland, 97074 Wuerzburg, Germany
| 
| Office: Room F-069a
| +49-931-888-5766 (phone)
| +49-931-888-5851 (fax)
| 
| 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#326001: cups-pdf: [NFS] mkdir: cannot create directory `/home/ANONYMOUS': Permission denied

2005-09-01 Thread Martin-Éric Racine
to, 2005-09-01 kello 20:28 +0300, Jari Aalto kirjoitti:
 | This looks to me as if the home was exported with root_squash from the
 | server. This will make cups-pdf fail in any case since it uses /home as
 | output directory on Debian.=20

 Correct. Root has no permission remotedly, but he must log into the
 machine who provides the shares. This is security issue, where
 root exploit in some machine does not gain further privileges.

This situation already is fully documented in the package; CUP-PDF
requires that HOME be exported *without* the root_squash NFS option.
Thus, I really dont see why this was reported as a bug; this is a
feature and a requirement.

-- 
Martin-Éric Racine
http://q-funk.iki.fi