Date: Mon, 10 Mar 2014 08:14:01 -0700 From: Garrett Cooper <yaneurabeya@gmail.com> To: Alan Somers <asomers@freebsd.org> Cc: "freebsd-testing@freebsd.org" <freebsd-testing@freebsd.org>, Peter Holm <peter@holm.cc> Subject: Re: "require.user: unprivileged" retains operator group Message-ID: <27ACFD8F-51FD-4ED0-9325-992267964742@gmail.com> In-Reply-To: <CAOtMX2jwEC9_vAuALsJ-ci5Tjk2LrPdKX_EtnaoS-M204f2kGw@mail.gmail.com> References: <20140310101620.GA83688@x2.osted.lan> <CAOtMX2jwEC9_vAuALsJ-ci5Tjk2LrPdKX_EtnaoS-M204f2kGw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> On Mar 10, 2014, at 8:00, Alan Somers <asomers@freebsd.org> wrote: >=20 >> On Mon, Mar 10, 2014 at 4:16 AM, Peter Holm <peter@holm.cc> wrote: >> $ kyua test user_test >> user_test:rootuser -> skipped: Requires root privileges [0.001s] >> user_test:nonrootuser -> broken: Caught unexpected exception: Tester fa= iled with code 2; this is a bug [0.039s] >>=20 >> 1/2 passed (1 failed) >> Committed action 1 >> $ su >> Password: >> root@x4:/usr/tests/sys/kern # kyua test user_test >> user_test:rootuser -> passed [0.031s] >> user_test:nonrootuser -> passed [0.022s] >>=20 >> 2/2 passed (0 failed) >> Committed action 50 >> root@x4:/usr/tests/sys/kern # kyua debug user_test:rootuser >> uid=3D0(root) gid=3D0(wheel) groups=3D0(wheel),5(operator) >> user_test:rootuser -> passed >> root@x4:/usr/tests/sys/kern # kyua debug user_test:nonrootuser >> uid=3D977(tests) gid=3D65534(nobody) groups=3D65534(nobody),5(operator) >> user_test:nonrootuser -> passed >> root@x4:/usr/tests/sys/kern # >>=20 >> http://people.freebsd.org/~pho/user_test.c >> -- >> Peter >=20 > I can reproduce it. Looks like an upstream bug in Kyua. Yes. Unfortunately unless you get the appropriate mode for Kyua, it won't be= able to setuid to a lower privilege unless it's run as root.. Cheers! -Garrett=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?27ACFD8F-51FD-4ED0-9325-992267964742>