* Jon LaBadie <[EMAIL PROTECTED]> [20080222 11:56]:
> On Fri, Feb 22, 2008 at 09:24:33AM -0500, McGraw, Robert P wrote:
> > 
> > OS: Solaris 10 SPARC
> > AMANDA Version: 2.5.2P1
> > 
> > Last night my Soalris 10 sparc host Amanda failed with the following errors
> > 
> > zorn      /export/users-z  lev 0  FAILED
> > [/local/Amanda/amanda-2.5.2p1/libexec/runtar exited with status 1: see
> > /tmp/amanda/client/daily/sendsize.20080221182142.debug]
> > 
> > A section of the /tmp/amanda/client/daily/sendsize.20080221182142.debug]
> > 
> > sendsize[13188]: time 23.002: estimate size for /export/users-a level 0: -1
> > KB

[...]

> > sendsize: time 23.915: pid 13196 finish time Thu Feb 21 18:22:06 2008
> > sendsize[13188]: time 23.999: sendsize: error [exec
> > /local/Amanda/amanda-2.5.2p1/libexec/runtar: Permission denied]
> > 
> > 
> > It seemed that everything with SUID that tried to run last night has
> > permission denied.
> > 
> > Here is an ls of the SUID files.
> > 
> > -rwsr-x---   1 root     operator   23744 Jun  7  2007 calcsize*
> > -rwsr-x---   1 root     operator   65820 Jun  7  2007 dumper*
> > -rwsr-x---   1 root     operator   13524 Jun  7  2007 killpgrp*
> > -rwsr-x---   1 root     operator   93424 Jun  7  2007 planner*
> > -rwsr-x---   1 root     operator   11352 Jun  7  2007 rundump*
> > -rwsr-x---   1 root     operator   14472 Jun  7  2007 runtar*
> > 
> > The seem to be correct and have not been changed since Jun 7.
> > 
> > All the other clients ran without problems.
> > 
> > Any ideas on the cause or was this just a cosmic ray hitting my computer
> > before the backup?
> 
> They are not world executable.  So the process executing them
> must either be root or in the operator group.  Might something
> have caused a change in the identity of your executing backup
> processes?  Or your group memberships?

Another thing to check: *if* the client is accessing those amanda suid
execs through NFS, then the NFS server must not squash root on the
client. Check how the server exports /local and how it is mounted on
the client...

jf

> 
> -- 
> Jon H. LaBadie                  [EMAIL PROTECTED]
>  JG Computing
>  12027 Creekbend Drive                (703) 787-0884
>  Reston, VA  20194            (703) 787-0922 (fax)

-- 
<° ><

Reply via email to