bugmldonkey, a multi-networks file-sharing client - Bugs: bug #20613, Reassigned to another tracker...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #20613: Reassigned to another tracker [was: Include run_as_group in options]

Submitter:  bachtiar <bachtiar>
Submitted:  Sun 29 Jul 2007 01:57:45 AM UTC
   
 
Category:  Core Severity:  3 - Normal
Item Group:  Feature request Status:  Ready For Test
Assigned to:  None Open/Closed:  Closed
Release:  None Release: 
Operating System:  Linux Binaries Origin:  Redhat/Fedora package
CPU type:  Intel x86

Jump to the original submission

Wed 06 Feb 2008 08:35:39 PM UTC, comment #8: 

THIS ITEM WAS REASSIGNED TO PATCH #6407


Please, do not post any new comments to this item.

spiralvoice <spiralvoice>
Group administrator
Sat 02 Feb 2008 10:51:08 PM UTC, comment #7: 

ping

spiralvoice <spiralvoice>
Group administrator
Wed 16 Jan 2008 03:20:09 PM UTC, comment #6: 

Please try the updated patch, I also included infos about the
user:group running MLDonkey in its "runinfo" command.

(file #14821)

spiralvoice <spiralvoice>
Group administrator
Sun 13 Jan 2008 12:00:52 PM UTC, comment #5: 

Using -run_as_user mldonkey -run_as_group mldonkey I get:

[dMain] Exception setgid failed: Operation not permitted trying to set group_gid [mldonkey]

Perhaps mldonkey user needs permission to change group? I.e. reversing the order of setgroup and setuser calls?

bachtiar <bachtiar>
Wed 09 Jan 2008 07:06:31 PM UTC, comment #4: 

Please try the attached patch

(file #14775)

spiralvoice <spiralvoice>
Group administrator
Fri 31 Aug 2007 10:33:28 PM UTC, comment #3: 

Sorry for typo, I meant "of those three options".

bachtiar <bachtiar>
Fri 31 Aug 2007 10:29:28 PM UTC, comment #2: 

Actually I was referring to a similar, but different problem.

The topic you mentioned is about adding secondary groups to mldonkey user. I am not trying to do that. I want to add other users to mldonkey group. By doing this, I would like to give other users access to files that mldonkey downloads.

Imagine you want to chroot mlnet process for security. Because only root has permission to use chroot, you must do it as root. So, mlnet starts as root:root, and later changes (via built-in code) to mldonkey:root. So even if I have set the primary group for mldonkey as mldonkey, it does not help, because mlnet still ends up running as mldonkey:root. Consequentially, downloaded files are also owned by mldonkey:root. This means that my user (e.g. john:mldonkey) is unable to read/write files unless:
(a) he in group "root"
(b) files are "o+rwx", or
(c) "su" command is used inside chroot

None of those two options is desirable, because they all pose a security risk, making chroot useless.

bachtiar <bachtiar>
Fri 31 Aug 2007 09:36:18 PM UTC, comment #1: 

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=296722

"Yeah, this is a known problem :
- mldonkey start as root
- mldonkey daemonize
- mldonkey changes to user mldonkey:mldonkey
- here comes the problem : mldonkey cannot use all the group of mldonkey
  user, only the primary one ( ie mldonkey in standrad install )

The problem comes from ocaml. There is not binding for the function
setgroups. So i cannot set all the group of a user."

Here is the open feature request on the Ocaml bug tracker:
http://caml.inria.fr/mantis/view.php?id=3047

So far no response..., submit date 2004-08-07...

spiralvoice <spiralvoice>
Group administrator
Sun 29 Jul 2007 01:57:45 AM UTC, original submission:  

THIS ITEM WAS REASSIGNED TO PATCH #6407
Mldonkey uses run_as_user configuration/command line option. This is much better than running "su - mldonkey" because it's simple, portable and it doesn't complicate chrooting.

However, there is no corresponding "run_as_group" yet. Having this option would be great because on a multiuser system, group permissions are usually used to grant regular users access to downloaded files. Without this option, files are still created belonging to group of user that started mldonkey (usually root).

bachtiar <bachtiar>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by spiralvoice (Posted a comment)
  • -email is unavailable- added by bachtiar (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 8 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-02-06 spiralvoice Reassign Itemmldonkey, a multi-networks file-sharing client, bug #20613 mldonkey, a multi-networks file-sharing client, patch #6407
    2008-01-16 spiralvoice Attached File- Added run_as_group.patch, #14821
    2008-01-16 spiralvoice Attached File#14775 Removed
    2008-01-09 spiralvoice Attached File- Added run_as_group.patch, #14775
        StatusWont Fix Ready For Test
        Open/ClosedClosed Open
    2007-08-31 spiralvoice StatusNone Wont Fix
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.12