Re: [K3b-user] How to backup root-owned file with k3b ?

[wwp <sub...@fr...>]

Hello Meino,


On Fri, 23 Jun 2006 18:41:50 +0200 (CEST) Meino Christian Cramer <Meino.Cra=
me...@gm...> wrote:

> From: wwp <sub...@fr...>
> Subject: Re: [K3b-user] How to backup root-owned file with k3b ?
> Date: Fri, 23 Jun 2006 18:34:40 +0200
>=20
> Heelo wwp,
>=20
>  I am using gentoo here and growisofs is from the stable branch and of
>  version 6.1-r1 ("r1" means: Gentoo has fixed some bugs found in
>  there...)
>=20
>  Things are becoming mysteriuos here. Maulder and Scully ? ;)
>=20
>  Is your growisofs set uid root (as mentioned in the manpage) ?=20

$ ls -l $(type -p growisofs)
-rwxr-xr-x 1 root root 75244 Feb 11 16:27 /usr/bin/growisofs

No :-). Maybe the version number matters here? Anyway my version of the bin=
ary
shows the string of the error you've shown, and running `su -` (as I do to
get root powers), SUDO_COMMAND is *not* set.


Regards,

> > Hello Meino,
> >=20
> >=20
> > On Fri, 23 Jun 2006 18:18:22 +0200 (CEST) Meino Christian Cramer
> > <Mei...@gm...> wrote:
> >=20
> > > From: wwp <sub...@fr...>
> > > Subject: Re: [K3b-user] How to backup root-owned file with k3b ?
> > > Date: Fri, 23 Jun 2006 18:03:10 +0200
> > >=20
> > > Hi wwp,
> > >=20
> > >  thank you for your fast reply!
> > >=20
> > >  As user I am able to use k3b (newest version).
> > >  So I did tze following as user
> > >=20
> > > 	echo $PATH
> > >=20
> > >  then I did a su to login as root
> > >  and submit a
> > >=20
> > > 	 export PATH=3D<output from the above command>
> > >=20
> > >  therefore both paths are identical.
> > >=20
> > >  Growisofs is still not found.
> > >=20
> > >  I started k3bsetup and took a look into the search paths listed
> > >  there:
> > >=20
> > >  Growisofs is located here: /usr/bin/growisofs on my system
> > >  and this path is alos listed as search path.
> > >=20
> > >  Then I thought: May be k3b is not telling the truth, so I started
> > >  growisofs  from the commandline as root:
> > >=20
> > >  solfire:/root>growisofs
> > >  :-( growisofs is being executed under sudo, aborting!
> > >     See NOTES paragraph in growisofs manual page for further details.
> > >  solfire:/home/mccramer>
> > >=20
> > >  BUMMER!
> > >=20
> > >  k3b is submitting the wrong error analysis, the user is confused as
> > >  growisofs is.
> > >=20
> > >  The manpage of growisofs is telling me the following:
> > >=20
> > >    If executed under sudo(8) growisofs refuses to start. This is done
> > > for the following reason. Naturally growisofs has to access the data
> > > set to be recorded to DVD media, either indirectly by letting mkisofs
> > > generate ISO9660  layout on-the-fly or directly if a pre-mastered ima=
ge
> > > is to be recorded. Being executed under sudo(8),  growisofs
> > > effectively  grants sudoers  read  access  to any file in the file
> > > system. The situation is intensified by the fact that growisofs parses
> > > MKISOFS environment vari- able  in  order  to  determine  alternative
> > > path to mkisofs executable image. This means that being executed under
> > > sudo(8),  growisofs  effec- tively  grants  sudoers  right  to execute
> > > program of their choice with elevated privileges. If you for any reas=
on
> > > still find the above accept- able  and  are  willing to take the
> > > consequences, then consider running following wrapper script under
> > > sudo(8)  in  place  for  real  growisofs binary.
> > >             #!/bin/ksh
> > >         unset SUDO_COMMAND
> > >         export MKISOFS=3D/path/to/trusted/mkisofs
> > >         exec growisofs "$@"
> > >        But  note that the recommended alternative to the above
> > > "workaround" is actually to install growisofs set-root-uid, in which
> > > case it will  drop privileges  prior  accessing data or executing
> > > mkisofs in order to pre- clude unauthorized access to the data.
> > > =20
> > >=20
> > >  Am I really the first one, who noticed this problem ??? Really ???
> > >=20
> > >  Keep hacking!
> >=20
> > Funny. Here:
> >=20
> > $ su - root
> > <password>
> >=20
> > $ type growisofs
> > growisofs is hashed (/usr/bin/growisofs)
> >=20
> > $ growisofs
> > growisofs: previous "session" device is not specified, do use -M or -Z
> > option
> >=20
> > And from k3b (still running as root), it works. Sorry, I have no clue w=
hy
> > it doesn't work for you, I hope this is not distro-specific (here: FC5,
> > selinux disabled). BTW, it's growisofs 5.21.
> >=20
> > Any other one?
> >=20
> >=20
> > Regards,
> >=20
> > > > Hello Meino,
> > > >=20
> > > >=20
> > > > On Fri, 23 Jun 2006 17:21:56 +0200 (CEST) Meino Christian Cramer
> > > > <Mei...@gm...> wrote:
> > > >=20
> > > > > Hi,
> > > > >=20
> > > > >  how can I backup files from my linux system, which are owned by
> > > > > root ?
> > > >=20
> > > > Using root. Other ways should be more complex and expose root data =
to
> > > > users, which is equivalent (and maybe more messy) than running k3b
> > > > (only) as root.
> > > >=20
> > > > =20
> > > > >  Starting k3b as root failed ("Cant find growisofs"). I did a
> > > > >=20
> > > > > 		   xhost + local
> > > > >=20
> > > > >  in beforehand.
> > > >=20
> > > > Where is growisofs? What's root's PATH? I'd bet that it's not simply
> > > > on root's path (/usr/local/ might not be for instance).
> > > >=20
> > > >=20
> > > > >  Thank you very much for any help in advance!
> > > >=20
> > > > HTH,
> >=20
> > --=20
> > wwp
>=20
>=20
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier Download IBM WebSphere Application Server v.1.0.1 based on Apache
> Geronimo
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=
=3D121642
> _______________________________________________ K3b-user mailing list
> K3b...@li...
> https://lists.sourceforge.net/lists/listinfo/k3b-user
>=20


--=20
wwp