On Wed, Oct 03, 2018 at 00:40:30 -0400, Gene Heskett wrote:
> On Wednesday 03 October 2018 00:01:33 Nathan Stratton Treadway wrote:
> /usr/local/etc is owned by root:staff, so how do I fix that so other 
> stuff:
> 
> drwxr-xr-x  3 amanda amanda  4096 Oct  2 14:26 amanda
> -rw-r--r--  1 root   root    1985 Mar  3  2017 amanda-security.conf
> drwxr-xr-x  6 root   root    4096 Apr  2  2009 Brother
> drwxrwxrwx  2 gene   gene    4096 Oct  2 02:02 heyu
> -r--r--r--  1 root   root   12047 Oct  7  2011 mediaprm
> -rw-r--r--  1 root   root   10911 Sep  8  2011 openssl.cnf
> drwxr-sr-x 10 root   root    4096 Dec 19  2006 RealPlayer
> -rw-r-----  1 root   root   19593 Sep 18  2008 rkhunter.conf
> drwxr-xr-x  9 root   root    4096 Dec  9  2009 ssl
> 
> that is also in that subdir still work??

"chmod -v g-w /usr/local/etc/" should get you past that specific error
message, at least.  (But /usr/local/ might have the same problem....)

I suspect that no non-root users actually need write access to the
/usr/local/etc/ directory, but I am not using Weezy myself so I am not
sure.

(I can say that recent releases of Ubuntu use drwxr-xr-x root:root as
permissions+owner on /usr/local/etc/ instead.)



> This is not something that has been changed on my watch while running 
> wheezy. At least not that my ancient, 84 in 2 days, wet ram can recall. 
> So its the default perms setup by the installer several years back.

Right.  The issue you are running into is that Debian's default setup
for this directory are incompatible with Amanda v3.5's new permission
checks on the the amanda-security.conf file.  The Debian Amanda packages
avoid this problem by putting amanda-security.conf under /etc/ (which is
already not group-writable) instead.

                                                Nathan

----------------------------------------------------------------------------
Nathan Stratton Treadway  -  [email protected]  -  Mid-Atlantic region
Ray Ontko & Co.  -  Software consulting services  -   http://www.ontko.com/
 GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt   ID: 1023D/ECFB6239
 Key fingerprint = 6AD8 485E 20B9 5C71 231C  0C32 15F3 ADCD ECFB 6239

Reply via email to