Re: [gentoo-user] Permissions problem

2023-08-15 Thread Stefan Schmiedl
 
Dienstag, 15. August 2023 16:55:

 
> Hello list,

> I'd like to develop a blog using www-apps/jekyll, which makes extensive use 
> of 
> ruby gems, of which I have no experience. On trying to install a new default 
> theme I get copious permission errors.

> The ruby gems live in /usr/lib64/ruby/gems/3.1.0/gems, and to install 
> anything 
> in that tree I need write permission on the destination directory and execute 
> permission on all those above it.

> This poses an obvious security problem.

> When I emerged jekyll and ran its installation routine, I found I had a new ~/
> bin directory with nine executable files in it. ~/bin/update_rubygems has 
> similar permission problems but is more concise in reporting them

> I can't add myself to a group and grant it permissions, because there seems 
> not to be any such group.

> How do Gentoo Ruby users get around this?



 Hello Peter,

first make sure that you don't have any "suspicious" rubygem based
executables in your path that might confuse things. Some time ago
I found some ancient such files in /usr/local/bin ...

Next, with a default ruby/rubygems installation, a normal user should
be able to install gems into their own $HOME/.gem directory. I'm doing
this on several gentoo boxes, never had a problem with that approach.

On one of the servers, I can run the following command, to which you can
compare your environment

 $ gem environment
RubyGems Environment:
  - RUBYGEMS VERSION: 3.3.26
  - RUBY VERSION: 3.1.4 (2023-03-30 patchlevel 223) [x86_64-linux]
  - INSTALLATION DIRECTORY: /usr/lib64/ruby/gems/3.1.0
  - USER INSTALLATION DIRECTORY: /home/.../.gem/ruby/3.1.0
  - RUBY EXECUTABLE: /usr/bin/ruby31
  - GIT EXECUTABLE: /usr/bin/git
  - EXECUTABLE DIRECTORY: /usr/bin
  - SPEC CACHE DIRECTORY: /home/.../.gem/specs
  - SYSTEM CONFIGURATION DIRECTORY: /etc
  - RUBYGEMS PLATFORMS:
 - ruby
 - x86_64-linux
  - GEM PATHS:
 - /usr/lib64/ruby/gems/3.1.0
 - /home/.../.gem/ruby/3.1.0
 - /usr/local/lib64/ruby/gems/3.1.0
  - GEM CONFIGURATION:
 - :update_sources => true
 - :verbose => true
 - :backtrace => true
 - :bulk_threshold => 1000
 - "install" => "--install-dir /home/.../.gem/ruby/3.1.0 --bindir 
/home/.../bin"
 - "uninstall" => "--install-dir /home/.../.gem/ruby/3.1.0 --bindir 
/home/...bin"
 - "update" => "--install-dir /home/.../.gem/ruby/3.1.0 --bindir 
/home/.../bin"
  - REMOTE SOURCES:
 - https://rubygems.org/
  - SHELL PATH:
 - /usr/local/sbin
 - /usr/local/bin
 - /usr/sbin
 - /usr/bin
 - /sbin
 - /bin
 - /opt/bin





Re: [gentoo-user] permissions problem

2006-02-04 Thread Jerry McBride
On Saturday 04 February 2006 19:39, John Jolet wrote:
 Okay, I give up.  I've been struggling with a couple of very, very
 strange permissions problems for months.  I just finished an emerge -
 e system and emerge -e world hoping it would fix it.  first problem:
 trying to use sudo, but it keeps saying can't open sudoers file,
 permission denied.  even if i'm root doing sudo it tells me that.
 here is permissions on /etc/sudoers: -r--r-  1 root root 1643
 Feb  3 04:48 /etc/sudoers
 here is sudo itself: ---s--x--x  1 root root 97104 Feb  4 08:53 /usr/
 bin/sudo

 I've compared this to other, working gentoo boxes and it all seems
 the same.  In addition, I'm trying to run MailScanner and if I try to
 have it run as postfix, I get a message that it can't open it's
 MailScanner.conf, even though i've made that owned by postfix.  Not
 sure if that's related, but it seems it could be.

Root should be able to read anything yes.

If this was my computer, I'd go into single user mode, set the partition read 
only and run fsck on it. Use the -N switch on the first pass and see if 
everything is alright with the file system.





-- 

**
 Registered Linux User Number 185956
  FSF Associate Member number 2340 since 05/20/2004
 Join me in chat at #linux-users on irc.freenode.net
Buy an Xbox for $149.00, run linux on it and Microsoft loses $150.00!
Buy an Xbox 360 core  for $299.00, run linux on it and Microsoft loses $11.00!
  Buy an Xbox 360 for $399.00, run linux on it and Microsoft loses $126.00!
9:49pm  up 139 days, 13:14,  4 users,  load average: 2.68, 2.27, 2.14
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] permissions problem

2006-02-04 Thread Richard Fish
On 2/4/06, Jerry McBride [EMAIL PROTECTED] wrote:
 If this was my computer, I'd go into single user mode, set the partition read
 only and run fsck on it. Use the -N switch on the first pass and see if
 everything is alright with the file system.

Agreed.

Also if you have ACL support enabled, you should check the ACLs for
the file and make sure they grant root access to the file.

Also, double check your kernel configuration for any security options
you have.  I use CONFIG_SECURITY_CAPABILITIES, and I know that I have
some bizarre permissions issues if I don't load capability.ko.

-Richard

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] permissions problem with kino

2005-08-05 Thread Bob Sanders
On Fri, 05 Aug 2005 17:29:05 +0200
Jean Magnan de Bornier [EMAIL PROTECTED] wrote:

 Hi all,
 I am trying to use kino, but face some permission problems.
 modules raw1394 an dv1394 are loaded, but when I want to use kino I get
 the answer that:
 dv1394 open: Permission non accordée (not granted)
 giving the +r to /dev/dv1394-0 which has root as owner and group does
 change nothing; with /dev/raw/raw1394 group is disk; putting my user in
 this group does nothing better.
 Not many infos on this permission issue in kino's manual.
 

Have you added your username to /etc/group, disk?

Bob
-- 
-  

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] permissions problem with kino

2005-08-05 Thread Jean Magnan de Bornier
Le 06 août à 02:59:19 Bob Sanders [EMAIL PROTECTED] écrit notamment:

| Have you added your username to /etc/group, disk?
yes, without any change!

cheers
-- 
  Jean Magnan de Bornier |Cours Victor Hugo
  e-mots: jean at bornier.net|13980 Alleins   France
  T 08 70 39 34 03   |P 06 09 17 35 87

-- 
gentoo-user@gentoo.org mailing list