I had a shell script working for backup that used smbmount (under 9.1). Now, after an automated Yast Online Update, it doesn't work because smbmount lacks suid permission. When I tried increasing the permissions of /usr/sbin/smbmount by +s, however, and calling smbmount again, I got a complaint from libsmb that "you must NOT suid smbmount". (That's not the exact wording; the machine where all this was happening is not at the same place I'm now writing from.) What's the correct way to enable ordinary users to run smbmount and to ensure that an online update doesn't undo that action? Paul
Paul, El Jue 04 Nov 2004 20:54, Paul W. Abrahams escribió:
I had a shell script working for backup that used smbmount (under 9.1). Now, after an automated Yast Online Update, it doesn't work because smbmount lacks suid permission. When I tried increasing the permissions of /usr/sbin/smbmount by +s, however, and calling smbmount again, I got a complaint from libsmb that "you must NOT suid smbmount". (That's not the exact wording; the machine where all this was happening is not at the same place I'm now writing from.)
What's the correct way to enable ordinary users to run smbmount and to ensure that an online update doesn't undo that action?
You should set the suid bit on /usr/bin/smbmnt and /usr/bin/smbumount, NOT smbmount. Regards, -- Andreas Philipp Noema Ltda. Bogotá, D.C. - Colombia
Andreas Philipp wrote:
Paul,
El Jue 04 Nov 2004 20:54, Paul W. Abrahams escribió:
I had a shell script working for backup that used smbmount (under 9.1). Now, after an automated Yast Online Update, it doesn't work because smbmount lacks suid permission. When I tried increasing the permissions of /usr/sbin/smbmount by +s, however, and calling smbmount again, I got a complaint from libsmb that "you must NOT suid smbmount". (That's not the exact wording; the machine where all this was happening is not at the same place I'm now writing from.)
What's the correct way to enable ordinary users to run smbmount and to ensure that an online update doesn't undo that action?
You should set the suid bit on /usr/bin/smbmnt and /usr/bin/smbumount, NOT smbmount.
The above, was a typo on my part. On my system, /usr/bin/smbmnt is a sym link to another sym link, to /usr/lib/samba/classic/smbmnt, which I have set to suid.
On Thursday 04 November 2004 9:26 pm, James Knott wrote:
You should set the suid bit on /usr/bin/smbmnt and /usr/bin/smbumount, NOT smbmount.
The above, was a typo on my part. On my system, /usr/bin/smbmnt is a sym link to another sym link, to /usr/lib/samba/classic/smbmnt, which I have set to suid.
The other question is how to prevent YOU or SuSEconfig from setting it back again. Do I do that through /etc/permissions? Paul
Paul W. Abrahams wrote:
On Thursday 04 November 2004 9:26 pm, James Knott wrote:
You should set the suid bit on /usr/bin/smbmnt and /usr/bin/smbumount, NOT smbmount.
The above, was a typo on my part. On my system, /usr/bin/smbmnt is a sym link to another sym link, to /usr/lib/samba/classic/smbmnt, which I have set to suid.
The other question is how to prevent YOU or SuSEconfig from setting it back again. Do I do that through /etc/permissions?
No idea. I'd never heard of that file, until now.
Paul W. Abrahams wrote:
The other question is how to prevent YOU or SuSEconfig from setting it back again. Do I do that through /etc/permissions?
Set it in /etc/permissions.local. That will last through an update. -- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Registered Linux user 231871
Paul W. Abrahams wrote:
I had a shell script working for backup that used smbmount (under 9.1). Now, after an automated Yast Online Update, it doesn't work because smbmount lacks suid permission. When I tried increasing the permissions of /usr/sbin/smbmount by +s, however, and calling smbmount again, I got a complaint from libsmb that "you must NOT suid smbmount". (That's not the exact wording; the machine where all this was happening is not at the same place I'm now writing from.)
What's the correct way to enable ordinary users to run smbmount and to ensure that an online update doesn't undo that action? Does /etc/mtab possibly have a bearing here?
-- The much tabbed Little Helper ======================================================================== Hylton Conacher - Linux user # 229959 at http://counter.li.org Currently using SuSE 9.0 Professional with KDE 3.1 Licenced Windows user ========================================================================
participants (5)
-
Andreas Philipp -
Hylton Conacher (ZR1HPC) -
James Knott -
Joe Morris (NTM) -
Paul W. Abrahams