robskillington / pdsh

Automatically exported from code.google.com/p/pdsh
GNU General Public License v2.0
0 stars 1 forks source link

"/": Owner not root, current uid, or pdsh executable owner #51

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
hi

I have installed pdsh as a root user.
When I am trying to run pdsh I got this error:
pdsh@00282b-ashatenfeld: module path "/usr/local/lib/pdsh" insecure.
pdsh@00282b-ashatenfeld: "/": Owner not root, current uid, or pdsh executable 
owner
pdsh@00282b-ashatenfeld: Couldn't load any pdsh modules

The owner of "/" is not root, but admin user. This is my work laptop, and this 
is the way how it was set up, and I cannot change ownership of / folder. 

Is there any other solution to this problem?

Thank you! 

Original issue reported on code.google.com by Anton.Sc...@gmail.com on 15 Aug 2012 at 8:59

GoogleCodeExporter commented 9 years ago
Interesting. The check is there to ensure that modules loaded dynamically
into the pdsh binary are not from an untrusted source or a path that could
have been modified by an untrusted source.

To work around this you can install pdsh as the 'admin' user instead of 'root'
This will tell the pdsh binary that path elements owned by 'admin' 'root' or 
your
uid are ok.

If you are not able to reinstall pdsh as the admin user, then you can rebuild 
pdsh
without the _path_permissions_ok() check in src/pdsh/pdsh.c.

Is this a linux laptop, or mac osx or something else?

Original comment by mark.gro...@gmail.com on 15 Aug 2012 at 9:13

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
hi Mark,

I am running Mac OS X 10.7.3, Kernel Version:   Darwin 11.3.0. 

All the folders except the root one "/" in the path "/usr/local/lib/pdsh" is 
owned by "root " user.
$ ll -d /usr/local/lib/pdsh
drwsr-sr-x  14 root  wheel   476B Aug 15 14:01 /usr/local/lib/pdsh
$ ll -d /usr/local/lib
drwxrwxr-x  4 root  wheel   136B Aug 13 18:32 /usr/local/lib
$ ll -d /usr/local
drwxr-xr-x@ 11 root  wheel   374B Aug 13 18:32 /usr/local
$ ll -d /usr
drwxr-xr-x@ 13 root  wheel   442B Jun 26 13:20 /usr
$ ll -d /
drwxr-xr-x  42 admin  admin   1.5K Jul  6 14:12 /

So I have not reinstalled pdsh, just changed the owner of pdsh and pdcp to 
admin and set sticky bit on them:
ll /usr/local/bin/pdsh /usr/local/bin/pdcp 
-rwsr-xr-x  1 admin  wheel   152K Aug 15 14:01 /usr/local/bin/pdcp
-rwsr-xr-x  1 admin  wheel   152K Aug 15 14:01 /usr/local/bin/pdsh

Now it works with modules.
Thank you!

Original comment by Anton.Sc...@gmail.com on 15 Aug 2012 at 11:08

GoogleCodeExporter commented 9 years ago
Ok, great!

Original comment by mark.gro...@gmail.com on 15 Aug 2012 at 11:57

GoogleCodeExporter commented 9 years ago
If possible, could you remove my name from my first comment. I forgot to clean 
up the shell output posted there.
Thanks!

Original comment by Anton.Sc...@gmail.com on 16 Aug 2012 at 2:02

GoogleCodeExporter commented 9 years ago
Unfortunately the comment text from the original issue report can't be modified 
(afaik) with google code. Sorry! :-(

If I figure out a way I can delete the original report or modify it.

Original comment by mark.gro...@gmail.com on 16 Aug 2012 at 3:38

GoogleCodeExporter commented 9 years ago
 sudo chmod 1755 /usr/local worked!

Original comment by jabirah...@gmail.com on 9 Jun 2014 at 7:06