[Bug 682340] New: 11.4 update breaks tftp server

https://bugzilla.novell.com/show_bug.cgi?id=682340 https://bugzilla.novell.com/show_bug.cgi?id=682340#c0 Summary: 11.4 update breaks tftp server Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: koenig@linux.de QAContact: qa@suse.de Found By: --- Blocker: --- update from 11.3 to 11.4 broke my tftp server! in.tftpd gets started by xinetd with default setup: service tftp { socket_type = dgram protocol = udp wait = yes flags = IPv6 IPv4 user = tftp server = /usr/sbin/in.tftpd server_args = -v -s /srv/tftpboot disable = no } then syslog shows Mar 24 15:11:43 harald in.tftpd[4646]: cannot set groups for user nobody note the "user nobody" which is a fake information as strace shows 4646 setgid(130) = 0 4646 setuid(127) = 0 4646 setgroups(2, [65533, 65534]) = -1 EPERM (Operation not permitted) so it's not user "nobody" but "tftp": # id tftp uid=127(tftp) gid=130(tftp) groups=130(tftp) using server_args = -v -u tftp -s /srv/tftpboot only changes the syslog message but not the problem: Mar 24 15:18:00 harald in.tftpd[7108]: cannot set groups for user tftp 7108 setgroups(1, [130]) = -1 EPERM (Operation not permitted) running this small program as root with strace shows the same EPERM for setgropus() ------------------------------------- #include #include #include #include main() { gid_t list = {130,}; int setrv; setuid(127); setrv = initgroups("tftp", 130); printf("setrv = %d\n",setrv); setgroups(1, &list); } ------------------------------------- my workaround for now: I changed xinetd.d/tftp back to user = root server_args = -u tftp -s /srv/tftpboot and now tftp works fine for me. another source code hack might be this patch --- /usr/src/packages/BUILD/tftp-hpa-5.0/tftpd/tftpd.c~ 2011-03-24 15:15:47.396000023 +0100 +++ /usr/src/packages/BUILD/tftp-hpa-5.0/tftpd/tftpd.c 2011-03-24 16:43:47.644000024 +0100 @@ -919,7 +919,8 @@ setrv = initgroups(user, pw->pw_gid); if (setrv) { syslog(LOG_ERR, "cannot set groups for user %s", user); - exit(EX_OSERR); + if (!getuid()) + exit(EX_OSERR); } #else #ifdef HAVE_SETGROUPS -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.