Package: postfix
Version: 2.2.4-1.0.1
Severity: normal

Trying to run "sudo newaliases" fails with a permission denied error,
despite the destination file, /etc/aliases.db, being owned by root and
being user writeable.

> ls -ld /etc
drwxrwsr-x  130 root root 8192 2005-11-29 20:50 /etc

/etc
> ls -l /etc/aliases*
-r--r--r--  1 michael root   898 2005-11-29 20:49 /etc/aliases
-rw-r--r--  1 root    root   770 2004-07-03 14:21 /etc/aliases~
-rw-r--r--  1 root    root 12288 2005-11-09 08:27 /etc/aliases.db
-rw-r--r--  1 root    root    16 2003-03-01 20:18 /etc/aliases.O

A system call trace shows it setting the effective user id to 500 (my
original user id) before attempting to open the aliases database file.
I don't see why it should do this at all.

setresgid32(-1, 0, -1)                  = 0
setgroups32(1, [0])                     = 0
setresuid32(-1, 500, -1)                = 0
open("/etc/aliases.db", O_RDWR)         = -1 EACCES (Permission denied)


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-eagle
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)

Versions of packages postfix depends on:
ii  adduser                      3.77        Add and remove users and groups
ii  debconf [debconf-2.0]        1.4.58      Debian configuration management sy
ii  dpkg                         1.13.11.0.1 package maintenance system for Deb
ii  libc6                        2.3.5-6     GNU C Library: Shared libraries an
ii  libdb4.2                     4.2.52-18   Berkeley v4.2 Database Libraries [
ii  libsasl2                     2.1.19-1.7  Authentication abstraction library
ii  libssl0.9.8                  0.9.8a-3    SSL shared libraries
ii  netbase                      4.23        Basic TCP/IP networking system

Versions of packages postfix recommends:
ii  emacs21-nox [mail-reader]     21.4a-1    The GNU Emacs editor (without X su
ii  mailutils [mail-reader]       1:0.6.90-3 GNU mailutils utilities for handli
ii  mutt [mail-reader]            1.5.9-2    Text-based mailreader supporting M
pn  resolvconf                    <none>     (no description available)

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to