Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-17 Thread clemens fischer
Steve Elliott wrote: > But I still think I am missing something about the general case - > Can dnsmasq-tftp serve an arbitary file? Plain files for sure, yes. > How can I setup dnsmasq to serve files owned by different users? Either put the files into a group shared by both dnsmasq and these us

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-17 Thread Steve Elliott
Niels, Thanks for your input on this issue... 1) Your test confirms that "nobody" cannot access the file from outside the CWD... [Steve@regret tmp]$ sudo -u nobody cp /home/Steve/Shared/workspace/xxx/xxx/bootrom.pxe.0 . cp: cannot stat `/home/Steve/Shared/workspace/xxx/xxx/bootrom.pxe.0': Permiss

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-16 Thread Jan Psota
clemens fischer wrote: > > Or like "su -c 'whoami; cat -tv that-file | head' nobody". That works > even when login is prohibited for user "nobody". But he already showed > the permissions, it must be some directory higher up. > He won't get there with 'cd' starting from '/' if it is like you s

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-16 Thread clemens fischer
Jan Psota wrote: > Why don't you check it with: >su -s /bin/bash - nobody > > and trying to read that file then? Or like "su -c 'whoami; cat -tv that-file | head' nobody". That works even when login is prohibited for user "nobody". But he already showed the permissions, it must be some

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-16 Thread Jan Psota
Dnia 2010-05-16, o godz. 20:32:07 clemens fischer napisaƂ(a): > Steve Elliott wrote: > [...] > My theory is that one of the directories your bootrom.pxe.o is burried > in doesn't have execute permissions for user nobody. > > For this kind of trouble I have this little bash function: > dirperms(

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-16 Thread clemens fischer
Steve Elliott wrote: > sudo -u nobody cp bootrom.pxe.o /tmp/ > > Works OK and leaves the expected entry > > -rwxr-xr-x. 1 nobody nobody 482040 2010-05-16 11:41 /tmp/bootrom.pxe.0 > > So user nobody CAN read the file - dnsmasq is running as nobody The command "sudo -u nobody cp f1 f2" will run the

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-16 Thread Niels Basjes
Hi, I would like you to check this: cd /tmp sudo -u nobody cp /home/Steve/Shared/workspace/xxx/xxx/bootrom.pxe.o . This is different in de sense that the working dorectory is different. Also I have another possibility to consider: Do you have something like SELinux or AppArmor enabled?? Ni

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-16 Thread Steve Elliott
Simon, Thanks again. - I'm showing my Linux user ignorance!! My user nobody cannot login or accept an su but sudo -u nobody cp bootrom.pxe.o /tmp/ Works OK and leaves the expected entry -rwxr-xr-x. 1 nobody nobody 482040 2010-05-16 11:41 /tmp/bootrom.pxe.0 So user nobody CAN read the file -

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-15 Thread clemens fischer
Helmut Hullen wrote: >> Can anyone suggest why I get 'Permission denied' for this access? > >> May 14 16:01:27 regret dnsmasq-tftp[13285]: cannot access >> /home/Steve/Shared/workspace/xxx/xxx/bootrom.pxe.0: Permission denied >> May 14 16:01:27 regret dnsmasq-tftp[13285]: cannot access >> /home/S

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-15 Thread Simon Kelley
Steve Elliott wrote: Simon, Thanks for the response. I do not have --tftp-secure. But I do launch with sudo /etc/rc.d/initd/dnsmasq So it seems that it will be run by root. No, it will be running as non-privileged user, "nobody" or "dnsmasq" unless you have user=root somewhere. Try "su

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-15 Thread Helmut Hullen
Hallo, Steve, Du meintest am 15.05.10: > But I do launch with > sudo /etc/rc.d/initd/dnsmasq > So it seems that it will be run by root. > Therefore I need world readable permission on my bootrom.pxe.0. > I thought I had that! > --- > /home/Steve/Shared/workspace/xxx/xxx/ > -rwxrwxr-x

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-15 Thread Steve Elliott
Simon, Thanks for the response. I do not have --tftp-secure. But I do launch with sudo /etc/rc.d/initd/dnsmasq So it seems that it will be run by root. Therefore I need world readable permission on my bootrom.pxe.0. I thought I had that! --- /home/Steve/Shared/workspace/xxx/xxx/ -r

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-14 Thread Helmut Hullen
Hallo, Steve, Du meintest am 14.05.10: > Can anyone suggest why I get 'Permission denied' for this access? > May 14 16:01:27 regret dnsmasq-tftp[13285]: cannot access > /home/Steve/Shared/workspace/xxx/xxx/bootrom.pxe.0: Permission denied > May 14 16:01:27 regret dnsmasq-tftp[13285]: cannot acce

Re: [Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-14 Thread Simon Kelley
Steve Elliott wrote: > Can anyone suggest why I get 'Permission denied' for this access? > > May 14 16:01:23 regret dnsmasq-dhcp[13285]: 1811947682 Available DHCP > subnet: 10.0.0.0/255.255.255.0 > May 14 16:01:23 regret dnsmasq-dhcp[13285]: 1811947682 Vendor class: > PXEClient:Arch:0:UNDI:002

[Dnsmasq-discuss] tftp 'Permission denied' issue...

2010-05-14 Thread Steve Elliott
Can anyone suggest why I get 'Permission denied' for this access? May 14 16:01:23 regret dnsmasq-dhcp[13285]: 1811947682 Available DHCP subnet: 10.0.0.0/255.255.255.0 May 14 16:01:23 regret dnsmasq-dhcp[13285]: 1811947682 Vendor class: PXEClient:Arch:0:UNDI:002001 May 14 16:01:23 regret dnsmas