https://bugzilla.novell.com/show_bug.cgi?id=373654 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c1 Juergen Weigert changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jw@novell.com --- Comment #1 from Juergen Weigert 2008-03-25 09:49:18 MST --- $ getfacl /usr/bin/crontab getfacl: Removing leading '/' from absolute path names # file: usr/bin/crontab # owner: root # group: trusted user::rwx group::r-x other::--- This is a regression. In 10.3 /usr/bin/crontab was user-callable: -rwsr-xr-x 1 root trusted 40672 Sep 21 2007 /usr/bin/crontab -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User mkoenig@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c2 Matthias Koenig changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mkoenig@novell.com AssignedTo|mkoenig@novell.com |lnussel@novell.com --- Comment #2 from Matthias Koenig 2008-04-02 07:27:57 MST --- This depends on the permissions file you use: # grep "/usr/bin/crontab" /etc/permissions* /etc/permissions.easy:/usr/bin/crontab root:trusted 4755 /etc/permissions.paranoid:/usr/bin/crontab root:trusted 0755 /etc/permissions.secure:/usr/bin/crontab root:trusted 4750 Maybe our default changed? Reassigning to Ludwig. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c4 Juergen Weigert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | --- Comment #4 from Juergen Weigert 2008-04-02 10:39:56 MST --- If we changed to paranoid without intent, then this is a bug as it should not have happened. If we changed to paranoid with intent, then it is a bug not to communicate such a change. What is our default permission setting for 11.0? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c6 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@novell.com AssignedTo|lnussel@novell.com |coolo@novell.com Status|REOPENED |NEW --- Comment #6 from Ludwig Nussel 2008-04-03 00:48:24 MST --- from /etc/permissions.secure: # system administrator for advice. In many cases, adding a user to the # "trusted" group gives her access to the resources that are not accessible # any more if the admin chose to select "secure" as the permissions default. I don't think changing the default to secure was intended. The default is not set by the permissions package though but some policy file for yast I think. Reassignig to coolo as he has to decide what permissions level he wants for openSUSE. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User cfarrell@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c8 Ciaran Farrell changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|cfarrell@novell.com | --- Comment #8 from Ciaran Farrell 2008-04-03 01:28:09 MST --- (In reply to comment #7 from Stephan Kulow)

what exactly did you install? do you have log files?

we surely did not change the default.

I did the same as what I always do: /suse/lnussel/bin/setupgrubfornfsinstall -> SLP scan -> FTP openSUSE 11.0 Build 55 DVD I used the default new installation and changed nothing. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c10 --- Comment #10 from Ludwig Nussel 2008-04-03 02:08:54 MST --- Wild guess, if the default didn't change could it be that SuSEconfig was not run? If this command: $ grep SECU /etc/sysconfig/security says "easy local" it probably wasn't. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c12 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID --- Comment #12 from Stephan Kulow 2008-04-03 02:37:40 MST --- ok, then this is a dead end. See you next time :) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c14 --- Comment #14 from Juergen Weigert 2008-04-03 08:45:29 MST --- Created an attachment (id=206063) --> (https://bugzilla.novell.com/attachment.cgi?id=206063) y2logs from my laptop 11.0 install -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|coolo@novell.com |bnc-team-screening@forge.provo.novell.com Status|REOPENED |NEW QAContact|qa@suse.de |jsrain@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c16 Juergen Weigert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|jw@novell.com | --- Comment #16 from Juergen Weigert 2008-04-03 09:14:17 MST --- The answer is yes. in 11.0 /etc/sysconfig/security contains PERMISSION_SECURITY="secure local" in 10.3 it contained PERMISSION_SECURITY="easy local" -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User locilka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c17 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|yast2-maintainers@suse.de |jsuchome@novell.com --- Comment #17 from Lukas Ocilka 2008-04-04 10:01:40 MST --- yast2-security: jsuchome -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c19 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|lnussel@novell.com |jsuchome@novell.com Status|NEW |ASSIGNED --- Comment #19 from Jiří­ Suchomel 2008-04-07 03:13:40 MST --- .. but it may be a bug in yast2-users, during second-stage write of root/first user. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c21 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bjorn.lie@gmail.com --- Comment #21 from Jiří­ Suchomel 2008-04-10 07:40:59 MST --- *** Bug 376819 has been marked as a duplicate of this bug. *** https://bugzilla.novell.com/show_bug.cgi?id=376819 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|crontab -e as user returns 'permission denied' |PERMISSION_SECURITY set to secure by default -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=373654 User hschaa@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=373654#c24 Helmut Schaa changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |opensuse@beris.nl --- Comment #24 from Helmut Schaa 2008-09-08 05:50:41 MDT --- *** Bug 420995 has been marked as a duplicate of this bug. *** https://bugzilla.novell.com/show_bug.cgi?id=420995 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.