Re: Settup Majordomo
I have the same directory permission as you, but I need to be group majordom in order to excute anything. I don't know how to find my setuid for the wrapper, if you can tell me exactly how I can't find it! I think it's set to majordom. Here is a copy of my Makefile. # current directory (where you unpacked the distribution) W_HOME = /usr/local/majordomo-$(VERSION) # Where do you want man pages to be installed? MAN = $(W_HOME)/man # You need to have or create a user and group which majordomo will run as. # Enter the numeric UID and GID (not their names!) here: W_USER = 1004 W_GROUP = 1004 # These set the permissions for all installed files and executables (except # the wrapper), respectively. Some sites may wish to make these more # lenient, or more restrictive. FILE_MODE = 644 EXEC_MODE = 755 HOME_MODE = 751 # If your system is POSIX (e.g. Sun Solaris, SGI Irix 5 and 6, Dec Ultrix MIPS, # BSDI or other 4.4-based BSD, Linux) use the following four lines. Do not # change these values! WRAPPER_OWNER = root WRAPPER_GROUP = $(W_GROUP) WRAPPER_MODE = 4755 On Tue, 27 Jan 1998, Steve Mayer wrote: Jeffrey, My /usr/lib/majordomo directory as permissions of drwxrwxr_x majordom majordom I can enter it as any user on the system. What did you find out about the wrapper script? Is the setuid bit set on it? Steve -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
Steve,
Here is a copy of my wrapper.c file, can you take a look at it!
/*
* $Source: /sources/cvsrepos/majordomo/wrapper.c,v $
* $Revision: 1.8 $
* $Date: 1997/08/27 15:01:12 $
* $Author: cwilson $
* $State: Exp $
*
* $Locker: $
*
*/
#ifndef lint
static char rcs_header[] = $Header: /sources/cvsrepos/majordomo/wrapper.c,v
1.8 1997/08/27 15:01:12 cwilson Exp $;
#endif
#include stdio.h
#include sysexits.h
#if defined(sun) defined(sparc)
#include stdlib.h
#endif
#ifndef STRCHR
# include string.h
# define STRCHR(s,c) strchr(s,c)
#endif
#ifndef BIN
# define BIN /usr/local/mail/majordomo
#endif
#ifndef PATH
# define PATH PATH=/bin:/usr/bin:/usr/ucb
#endif
#ifndef HOME
# define HOME HOME=/usr/local/mail/majordomo
#endif
#ifndef SHELL
# define SHELL SHELL=/bin/sh
#endif
char * new_env[] = {
HOME, /* 0 */
PATH, /* 1 */
SHELL, /* 2 */
#ifdef MAJORDOMO_CF
MAJORDOMO_CF, /* 3 */
#endif
0, /* possibly for USER or LOGNAME */
0, /* possible for LOGNAME */
0, /* possibly for timezone */
0
};
int new_env_size = 7; /* to prevent overflow problems
*/
main(argc, argv, env)
int argc;
char * argv[];
char * env[];
{
char * prog;
int e, i;
if (argc 2) {
fprintf(stderr, USAGE: %s program [arg ...]\n, argv[0]);
exit(EX_USAGE);
}
/* if the command contains a /, then don't allow it */
if (STRCHR(argv[1], '/') != (char *) NULL) {
/* this error message is intentionally cryptic */
fprintf(stderr, %s: error: insecure usage\n, argv[0]);
exit(EX_NOPERM);
}
if ((prog = (char *) malloc(strlen(BIN) + strlen(argv[1]) + 2)) == NULL) {
fprintf(stderr, %s: error: malloc failed\n, argv[0]);
exit(EX_OSERR);
}
sprintf(prog, %s/%s, BIN, argv[1]);
/* copy the USER= and LOGNAME= envariables into the new environment,
* if they exist.
*/
#ifdef MAJORDOMO_CF
e = 4; /* the first unused slot in new_env[] */
#else
e = 3; /* the first unused slot in new_env[] */
#endif
for (i = 0 ; env[i] != NULL e = new_env_size; i++) {
if ((strncmp(env[i], USER=, 5) == 0) ||
(strncmp(env[i], TZ=, 3) == 0) ||
(strncmp(env[i], LOGNAME=, 8) == 0)) {
new_env[e++] = env[i];
}
}
#if defined(SETGROUP)
/* renounce any previous group memberships if we are running as root */
if (geteuid() == 0) { /* Should I exit if this test fails? */
char *setgroups_used = setgroups_was_included; /* give strings a hint */
#if defined(MAIL_GID)
int groups[] = { POSIX_GID, MAIL_GID, 0 };
if (setgroups(2, groups) == -1) {
#else
int groups[] = { POSIX_GID, 0 };
if (setgroups(1, groups) == -1) {
#endif
extern int errno;
fprintf(stderr, %s: error setgroups failed errno %d, argv[0],
errno);
}
}
#endif
#ifdef POSIX_GID
setgid(POSIX_GID);
#else
setgid(getegid());
#endif
#ifdef POSIX_UID
setuid(POSIX_UID);
#else
setuid(geteuid());
#endif
if ((getuid() != geteuid()) || (getgid() != getegid())) {
fprintf(stderr, %s: error: Not running with proper UID and GID.\n,
argv[0]);
fprintf(stderr, Make certain that wrapper is installed setuid, and
if so,\n);
fprintf(stderr, recompile with POSIX flags.\n);
exit(EX_SOFTWARE);
}
execve(prog, argv+1, new_env);
/* the exec should never return */
fprintf(stderr, wrapper: Trying to exec %s failed: , prog);
perror(NULL);
fprintf(stderr, Did you define PERL correctly in the Makefile?\n);
fprintf(stderr, HOME is %s,\n, HOME);
fprintf(stderr, PATH is %s,\n, PATH);
fprintf(stderr, SHELL is %s,\n, SHELL);
fprintf(stderr, MAJORDOMO_CF is %s\n, MAJORDOMO_CF);
exit(EX_OSERR);
}
Re: Settup Majordomo
On Wed, 28 Jan 1998, Jeffrey Velez wrote: I have the same directory permission as you, but I need to be group majordom in order to excute anything. I don't know how to find my setuid for the wrapper, if you can tell me exactly how I can't find it! I think it's set to majordom. Here is a copy of my Makefile. ok, you're obviously compiling your own version. save yourself some hassle and install the debian package of majordomo. it works. craig -- craig sanders -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
CAN ANYONE TELL ME WHY I CAN NOT POST OR UNSUBSCRIBE? Perhaps majordomo is case-sensitive and you are typing everything in all-caps? -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
I ONLY SENT THIS EMAIL IN ALL CAPS! THANKS ANYWAY! On 27 Jan 1998, Ben Pfaff wrote: CAN ANYONE TELL ME WHY I CAN NOT POST OR UNSUBSCRIBE? Perhaps majordomo is case-sensitive and you are typing everything in all-caps? -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
Jeffrey, Verify that the wrapper script in the Majordomo directory is setuid root. Also, log in as someone other than root and run ./wrapper config-test from the majordomo directory (where wrapper is located). This will tell you if there are any permission or configuration problems. Steve Mayer [EMAIL PROTECTED] Jeffrey Velez wrote: I INSTALLED MAJORDOMO-1.94.4 ON MY DEBIAN LINUX MACHINE USING SENDMAIL, BUT I'M GETTING SOME ERROR WHEN TRYING TO POST OR UNSUBSCRIBE. I CAN SUBSCRIBE, BUT CAN NOT POST OR UNSUBSCRIBE. I GET THE FOLLOWING ERROR WHEN DOING SO: MAJORDOMO ABORT (mj_majordomo)!! Can't append to /usr/local/majordomo-1.94.4/lists/ccmail: Permission denied MY LISTS DIRECTORY RIGHTS ARE: drwxrwxrwx 3 majordom majordom 1024 Jan 27 10:18 lists IN MY LIST DIRECTORY THE FOLLOWING FILES ARE IN THERE: total 47 -rw-rw 1 majordom majordom4 Jan 27 06:36 L.ccmail -rwxrwxrwx 1 majordom majordom 60 Jan 27 06:26 ccmail -rwxrwxrwx 1 majordom majordom16088 Jan 27 06:24 ccmail.config -rw-rw-r-- 1 majordom majordom24672 Jan 27 06:18 ccmail.info -rwxrwxrwx 1 majordom majordom0 Jan 27 06:36 ccmail.new -rw-rw 1 majordom majordom7 Jan 27 09:15 ccmail.passwd CAN ANYONE TELL ME WHY I CAN NOT POST OR UNSUBSCRIBE? -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] . -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
Steve I run the script as another user and I get no errors, of course this user is a majordom group. On Tue, 27 Jan 1998, Steve Mayer wrote: Jeffrey, Verify that the wrapper script in the Majordomo directory is setuid root. Also, log in as someone other than root and run ./wrapper config-test from the majordomo directory (where wrapper is located). This will tell you if there are any permission or configuration problems. Steve Mayer [EMAIL PROTECTED] Jeffrey Velez wrote: I INSTALLED MAJORDOMO-1.94.4 ON MY DEBIAN LINUX MACHINE USING SENDMAIL, BUT I'M GETTING SOME ERROR WHEN TRYING TO POST OR UNSUBSCRIBE. I CAN SUBSCRIBE, BUT CAN NOT POST OR UNSUBSCRIBE. I GET THE FOLLOWING ERROR WHEN DOING SO: MAJORDOMO ABORT (mj_majordomo)!! Can't append to /usr/local/majordomo-1.94.4/lists/ccmail: Permission denied MY LISTS DIRECTORY RIGHTS ARE: drwxrwxrwx 3 majordom majordom 1024 Jan 27 10:18 lists IN MY LIST DIRECTORY THE FOLLOWING FILES ARE IN THERE: total 47 -rw-rw 1 majordom majordom4 Jan 27 06:36 L.ccmail -rwxrwxrwx 1 majordom majordom 60 Jan 27 06:26 ccmail -rwxrwxrwx 1 majordom majordom16088 Jan 27 06:24 ccmail.config -rw-rw-r-- 1 majordom majordom24672 Jan 27 06:18 ccmail.info -rwxrwxrwx 1 majordom majordom0 Jan 27 06:36 ccmail.new -rw-rw 1 majordom majordom7 Jan 27 09:15 ccmail.passwd CAN ANYONE TELL ME WHY I CAN NOT POST OR UNSUBSCRIBE? -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] . -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
I NOTICE IF I TRY TO CHANGE MAJORDOMO DIRECTORY AS A REGULAR USER, I GET ACCESS DENIED. WHAT GROUP SHOULD I CHANGE IT TO, SO THAT ALL USERS CAN CHANGE DIRECTORY IN MAJORDOMO? -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
Jeffrey Velez [EMAIL PROTECTED] writes: I ONLY SENT THIS EMAIL IN ALL CAPS! THANKS ANYWAY! On 27 Jan 1998, Ben Pfaff wrote: CAN ANYONE TELL ME WHY I CAN NOT POST OR UNSUBSCRIBE? Perhaps majordomo is case-sensitive and you are typing everything in all-caps? Good point :-) Maybe setleds -caps will help as well. Or to say it with RFC 1855 (ftp://ds.internic.net/rfc/rfc1855.txt) : [...] - Use mixed case. UPPER CASE LOOKS AS IF YOU'RE SHOUTING. And just in case he is the one who has already falsified a comment I gave about shouting: From the same RFC: - If you are forwarding or re-posting a message you've received, do not change the wording. If the message was a personal message to you and you are re-posting to a group, you should ask permission first. You may shorten the message and quote only relevant parts, but be sure you give proper attribution. Greetings, Martin -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
Sorry about the caps! On 27 Jan 1998, Martin Bialasinski wrote: Jeffrey Velez [EMAIL PROTECTED] writes: I ONLY SENT THIS EMAIL IN ALL CAPS! THANKS ANYWAY! On 27 Jan 1998, Ben Pfaff wrote: CAN ANYONE TELL ME WHY I CAN NOT POST OR UNSUBSCRIBE? Perhaps majordomo is case-sensitive and you are typing everything in all-caps? Good point :-) Maybe setleds -caps will help as well. Or to say it with RFC 1855 (ftp://ds.internic.net/rfc/rfc1855.txt) : [...] - Use mixed case. UPPER CASE LOOKS AS IF YOU'RE SHOUTING. And just in case he is the one who has already falsified a comment I gave about shouting: From the same RFC: - If you are forwarding or re-posting a message you've received, do not change the wording. If the message was a personal message to you and you are re-posting to a group, you should ask permission first. You may shorten the message and quote only relevant parts, but be sure you give proper attribution. Greetings, Martin -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] . -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Settup Majordomo
Jeffrey, My /usr/lib/majordomo directory as permissions of drwxrwxr_x majordom majordom I can enter it as any user on the system. What did you find out about the wrapper script? Is the setuid bit set on it? Steve Jeffrey Velez wrote: I NOTICE IF I TRY TO CHANGE MAJORDOMO DIRECTORY AS A REGULAR USER, I GET ACCESS DENIED. WHAT GROUP SHOULD I CHANGE IT TO, SO THAT ALL USERS CAN CHANGE DIRECTORY IN MAJORDOMO? -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
