Bug#405880: kdelibs4c2a: KDE User Mgmt tool breaks login permissions

2007-01-07 Thread Ana Guerrero
reassign 405880 kde-guidance 
thanks

Hi Larry,

On Sun, Jan 07, 2007 at 12:21:36AM -0700, Larry Lade wrote:
 I'm just using the Control Center GUI. KDE su claims it is invoking
 
 kcmshell System/userconfig --embed 52430481 --lang en_US
 
 when the Administrator Mode button is clicked.

Thanks for the info. I just found out this option is offered in the Control 
Center if you have installed kde-guidance, so i'm reasssigning the bug to 
this package.

Ana


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#405880: kdelibs4c2a: KDE User Mgmt tool breaks login permissions

2007-01-07 Thread Sune Vuorela
On Sunday 07 January 2007 09:00, Ana Guerrero wrote:
 Thanks for the info. I just found out this option is offered in the Control
 Center if you have installed kde-guidance, so i'm reasssigning the bug to
 this package.

I have looked into this bug quickly.

It seems to be the following:

kde-guidance creates a temporary file (with whatever umask is set to, in 
larrys case to 077) so the temporary file is with 0600 permissions.
Then kde-guidance looks at group and owner of /etc/passwd and sets the same 
group and owner on the temporary file - and finally moves the temporary file 
over to /etc/passwd.

I am not very good at python, so my analyzis might be wrong.
At least I tried the following patch which absolutely didn't work (it didn't 
do any harm either)

--- kde-guidance-0.7.0.orig/userconfig/unixauthdb.py
+++ kde-guidance-0.7.0/userconfig/unixauthdb.py
@@ -828,6 +828,7 @@
 #print u._getPasswdEntry()
 os.close(fd)
 os.chown(tmpname, origstat.st_uid, origstat.st_gid)
+   os.chmod(tmpname, origstat.s_imode)

 # Update the passwd file
 passwordlock = os.open(self.__passwordfile, os.O_WRONLY) # FIXME 
encoding

(I guess it is my python syntax that is wrong, but someone with better python 
might be able to correct it)

/Sune


-- 
Man, do you know how can I overclock the monitor on the cable on a ATI 
attachment?

First from Outlook Express 99 or from the drawer within Office you neither can 
ever install a coaxial ISDN forward, nor can ever rename the file, this way 
from Flash 97 you never have to send to the prompt to open the analogic 
processor of the RW gadget on the TCP button to a virus.


pgptgJCrNCVxt.pgp
Description: PGP signature


Bug#405880: kdelibs4c2a: KDE User Mgmt tool breaks login permissions

2007-01-06 Thread Larry Lade
Package: kdelibs4c2a
Version: 4:3.5.5a.dfsg.1-5
Severity: critical
Justification: breaks unrelated software

I create a new user using the User Management Control Center application 
(kcmshell), in su/Administrator mode. After this, I am unable to log into X, 
numerous services will not start, and I get I have no name with console 
logins.

The problem turns out to be that the permissions on /etc/passwd and /etc/group 
are changed by this tool to 600 instead of 644. Manually resetting the 
permissions fixes everything.



-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-howard
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages kdelibs4c2a depends on:
ii  kdelibs- 4:3.5.5a.dfsg.1-5   core shared data for all KDE appli
ii  libacl1  2.2.42-1Access control list shared library
ii  libart-2 2.3.17-1Library of functions for 2D graphi
ii  libarts1 1.5.5-1 aRts sound system core components
ii  libasoun 1.0.13-1ALSA library
ii  libaspel 0.60.4-4GNU Aspell spell-checker runtime l
ii  libattr1 1:2.4.32-1.1Extended attribute shared library
ii  libaudio 1.8-2   The Network Audio System (NAS). (s
ii  libavahi 0.6.16-1Avahi client library
ii  libavahi 0.6.16-1Avahi common library
ii  libavahi 0.6.16-1Avahi Qt3 integration library
ii  libbz2-1 1.0.3-6 high-quality block-sorting file co
ii  libc62.3.6.ds1-9 GNU C Library: Shared libraries
ii  libcomer 1.39+1.40-WIP-2006.11.14+dfsg-1 common error description library
ii  libcupsy 1.2.7-2 Common UNIX Printing System(tm) - 
ii  libfontc 2.4.2-1 generic font configuration library
ii  libfreet 2.2.1-howard.2  FreeType 2 font engine, shared lib
ii  libgamin 0.1.8-1 Client library for the gamin file 
ii  libgcc1  1:4.1.1-21  GCC support library
ii  libgnutl 1.4.4-3 the GNU TLS library - runtime libr
ii  libice6  1:1.0.1-2   X11 Inter-Client Exchange library
ii  libidn11 0.6.5-1 GNU libidn library, implementation
ii  libjaspe 1.701.0-2   The JasPer JPEG-2000 runtime libra
ii  libjpeg6 6b-13   The Independent JPEG Group's JPEG 
ii  libkrb53 1.4.4-5 MIT Kerberos runtime libraries
ii  liblua50 5.0.3-2 Main interpreter library for the L
ii  libluali 5.0.3-2 Extension library for the Lua 5.0 
ii  libopene 1.2.2-4.3   runtime files for the OpenEXR imag
ii  libpcre3 6.7-1   Perl 5 Compatible Regular Expressi
ii  libpng12 1.2.15~beta5-1  PNG library - runtime
ii  libqt3-m 3:3.3.7-2   Qt GUI Library (Threaded runtime v
ii  libsm6   1:1.0.1-3   X11 Session Management library
ii  libstdc+ 4.1.1-21The GNU Standard C++ Library v3
ii  libtiff4 3.8.2-7 Tag Image File Format (TIFF) libra
ii  libx11-6 2:1.0.3-4   X11 client-side library
ii  libxcurs 1.1.7-4 X cursor management library
ii  libxext6 1:1.0.1-2   X11 miscellaneous extension librar
ii  libxft2  2.1.8.2-8   FreeType-based font drawing librar
ii  libxi6   1:1.0.1-4   X11 Input extension library
ii  libxiner 1:1.0.1-4.1 X11 Xinerama extension library
ii  libxml2  2.6.27.dfsg-1   GNOME XML library
ii  libxrand 2:1.1.0.2-5 X11 RandR extension library
ii  libxrend 1:0.9.1-3   X Rendering Extension client libra
ii  libxslt1 1.1.19-1XSLT processing library - runtime 
ii  libxt6   1:1.0.2-2   X11 toolkit intrinsics library
ii  menu-xdg 0.2.3   freedesktop.org menu compliant win
ii  perl 5.8.8-7 Larry Wall's Practical Extraction 
ii  xbase-cl 1:7.1.ds-3  miscellaneous X clients
ii  zlib1g   1:1.2.3-13  compression library - runtime

Versions of packages kdelibs4c2a recommends:
ii  perl-suid 5.8.8-7Runs setuid Perl scripts

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#405880: kdelibs4c2a: KDE User Mgmt tool breaks login permissions

2007-01-06 Thread Ana Guerrero

Hi Larry,

On Sat, Jan 06, 2007 at 07:45:14PM -0700, Larry Lade wrote:
 Package: kdelibs4c2a
 Version: 4:3.5.5a.dfsg.1-5
 Severity: critical
 Justification: breaks unrelated software
 
 I create a new user using the User Management Control Center application 
 (kcmshell), in su/Administrator mode. After this, I am unable to log into X, 
 numerous services will not start, and I get I have no name with console 
 logins.
 
 The problem turns out to be that the permissions on /etc/passwd and 
 /etc/group are changed by this tool to 600 instead of 644. Manually resetting 
 the permissions fixes everything.


Do you remember exaclty the commands that you executed with kcmshell?
I have looked at the Control Center and direclty in the kcmshell
options and there is not User management module:

[EMAIL PROTECTED]:~$ kcmshell --list | grep -i user
useragent  - Configure the way Konqueror reports itself
kcm_useraccount- User information such as password, name and email
privacy- Privacy - a kcontrol module to clean unwanted traces 
the user leaves on the system


To manage users in KDE you have kuser. Perhaps were you using this tool?

Ana


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#405880: kdelibs4c2a: KDE User Mgmt tool breaks login permissions

2007-01-06 Thread Larry Lade

I'm just using the Control Center GUI. KDE su claims it is invoking

kcmshell System/userconfig --embed 52430481 --lang en_US

when the Administrator Mode button is clicked.