bugmldonkey, a multi-networks file-sharing client - Bugs: bug #20613, Reassigned to another tracker...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #20613: Reassigned to another tracker [was: Include run_as_group in options]

Submitted by:  bachtiar <bachtiar>
Submitted on:  Sun 29 Jul 2007 01:57:45 AM UTC  
 
Category: CoreSeverity: 3 - Normal
Item Group: Feature requestStatus: Ready For Test
Assigned to: NoneOpen/Closed: Closed
Release: Release: None
Operating System: LinuxBinaries Origin: Redhat/Fedora package
CPU type: Intel x86

(Jump to the original submission Jump to the original submission)

Wed 06 Feb 2008 08:35:39 PM UTC, comment #8:

THIS ITEM WAS REASSIGNED TO PATCH #6407


Please, do not post any new comments to this item.

spiralvoice <spiralvoice>
Project Administrator
Sat 02 Feb 2008 10:51:08 PM UTC, comment #7:

ping

spiralvoice <spiralvoice>
Project Administrator
Wed 16 Jan 2008 03:20:09 PM UTC, comment #6:

Please try the updated patch, I also included infos about the
user:group running MLDonkey in its "runinfo" command.

(file #14821)

spiralvoice <spiralvoice>
Project Administrator
Sun 13 Jan 2008 12:00:52 PM UTC, comment #5:

Using -run_as_user mldonkey -run_as_group mldonkey I get:

[dMain] Exception setgid failed: Operation not permitted trying to set group_gid [mldonkey]

Perhaps mldonkey user needs permission to change group? I.e. reversing the order of setgroup and setuser calls?

bachtiar <bachtiar>
Wed 09 Jan 2008 07:06:31 PM UTC, comment #4:

Please try the attached patch

(file #14775)

spiralvoice <spiralvoice>
Project Administrator
Fri 31 Aug 2007 10:33:28 PM UTC, comment #3:

Sorry for typo, I meant "of those three options".

bachtiar <bachtiar>
Fri 31 Aug 2007 10:29:28 PM UTC, comment #2:

Actually I was referring to a similar, but different problem.

The topic you mentioned is about adding secondary groups to mldonkey user. I am not trying to do that. I want to add other users to mldonkey group. By doing this, I would like to give other users access to files that mldonkey downloads.

Imagine you want to chroot mlnet process for security. Because only root has permission to use chroot, you must do it as root. So, mlnet starts as root:root, and later changes (via built-in code) to mldonkey:root. So even if I have set the primary group for mldonkey as mldonkey, it does not help, because mlnet still ends up running as mldonkey:root. Consequentially, downloaded files are also owned by mldonkey:root. This means that my user (e.g. john:mldonkey) is unable to read/write files unless:
(a) he in group "root"
(b) files are "o+rwx", or
(c) "su" command is used inside chroot

None of those two options is desirable, because they all pose a security risk, making chroot useless.

bachtiar <bachtiar>
Fri 31 Aug 2007 09:36:18 PM UTC, comment #1:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=296722

"Yeah, this is a known problem :
- mldonkey start as root
- mldonkey daemonize
- mldonkey changes to user mldonkey:mldonkey
- here comes the problem : mldonkey cannot use all the group of mldonkey
user, only the primary one ( ie mldonkey in standrad install )

The problem comes from ocaml. There is not binding for the function
setgroups. So i cannot set all the group of a user."

Here is the open feature request on the Ocaml bug tracker:
http://caml.inria.fr/mantis/view.php?id=3047

So far no response..., submit date 2004-08-07...

spiralvoice <spiralvoice>
Project Administrator
Sun 29 Jul 2007 01:57:45 AM UTC, original submission:

THIS ITEM WAS REASSIGNED TO PATCH #6407
Mldonkey uses run_as_user configuration/command line option. This is much better than running "su - mldonkey" because it's simple, portable and it doesn't complicate chrooting.

However, there is no corresponding "run_as_group" yet. Having this option would be great because on a multiuser system, group permissions are usually used to grant regular users access to downloaded files. Without this option, files are still created belonging to group of user that started mldonkey (usually root).

bachtiar <bachtiar>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by spiralvoice (Posted a comment)
  • -unavailable- added by bachtiar (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 8 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 06 Feb 2008 08:35:40 PM UTCspiralvoiceReassign Itemmldonkey, a multi-networks file-sharing client, bug #20613=>mldonkey, a multi-networks file-sharing client, patch #6407
    Wed 16 Jan 2008 03:20:09 PM UTCspiralvoiceAttached File-=>Added run_as_group.patch, #14821
    Wed 16 Jan 2008 03:19:39 PM UTCspiralvoiceAttached File#14775=>Removed
    Wed 09 Jan 2008 07:06:31 PM UTCspiralvoiceAttached File-=>Added run_as_group.patch, #14775
      StatusWont Fix=>Ready For Test
      Open/ClosedClosed=>Open
    Fri 31 Aug 2007 09:36:18 PM UTCspiralvoiceStatusNone=>Wont Fix
      Open/ClosedOpen=>Closed

    Back to the top


    Powered by Savane 3.1-cleanup1