Sudo binary missing suid - bit

Sudo binary missing suid - bit

[Keskinarkaus, Teemu]

[-- Attachment #1: Type: text/plain, Size: 1264 bytes --]

Hi,

I'm trying to get sudo - binary working in Yocto/Poky - based project. The binary is already on image, but for some reason it lacks the suid - bit and thus does not work. If I add the suid - bit with root user the sudo starts working as expected.

There is in sudo - recipe this line:  chmod 411 ${D}${bindir}/sudo

And the sudo - binary in sudo/1.8.6p7-r2/image/usr/bin has the right modes for binary, but when it gets installed to actual image the suid - bit is lost.

Any idea how to fix that? Since the sudo is part of the poky I would thought it would work without too much of a hassle.

Teemu Keskinarkaus



________________________________

Actuant Corporation Email Notice

This message is intended only for the use of the Addressee and may contain information that is PRIVILEGED and/or CONFIDENTIAL.
This email is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this email is not an intended recipient, you have received this email in error and any review, dissemination, distribution or copying is strictly prohibited.
If you have received this email in error, please notify the sender immediately by return mail and permanently delete the copy you received.

Thank you.

[-- Attachment #2: Type: text/html, Size: 2716 bytes --]

Re: Sudo binary missing suid - bit

[Keskinarkaus, Teemu]

Ups. I meant mode 4111.

-TK

From: poky-bounces@yoctoproject.org [mailto:poky-bounces@yoctoproject.org] On Behalf Of Keskinarkaus, Teemu
Sent: 1. lokakuuta 2013 12:39
To: poky@yoctoproject.org
Subject: [poky] Sudo binary missing suid - bit

Hi,

I'm trying to get sudo - binary working in Yocto/Poky - based project. The binary is already on image, but for some reason it lacks the suid - bit and thus does not work. If I add the suid - bit with root user the sudo starts working as expected.

There is in sudo - recipe this line:  chmod 411 ${D}${bindir}/sudo

And the sudo - binary in sudo/1.8.6p7-r2/image/usr/bin has the right modes for binary, but when it gets installed to actual image the suid - bit is lost.

Any idea how to fix that? Since the sudo is part of the poky I would thought it would work without too much of a hassle.

Teemu Keskinarkaus



________________________________

Actuant Corporation Email Notice

This message is intended only for the use of the Addressee and may contain information that is PRIVILEGED and/or CONFIDENTIAL.
This email is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this email is not an intended recipient, you have received this email in error and any review, dissemination, distribution or copying is strictly prohibited.
If you have received this email in error, please notify the sender immediately by return mail and permanently delete the copy you received.

Thank you.

Re: Sudo binary missing suid - bit

[Saul Wold]

On 10/01/2013 02:41 AM, Keskinarkaus, Teemu wrote:
> Ups. I meant mode 4111.
>
> -TK
>
> From: poky-bounces@yoctoproject.org [mailto:poky-bounces@yoctoproject.org] On Behalf Of Keskinarkaus, Teemu
> Sent: 1. lokakuuta 2013 12:39
> To: poky@yoctoproject.org
> Subject: [poky] Sudo binary missing suid - bit
>
> Hi,
>
> I'm trying to get sudo - binary working in Yocto/Poky - based project. The binary is already on image, but for some reason it lacks the suid - bit and thus does not work. If I add the suid - bit with root user the sudo starts working as expected.
>
> There is in sudo - recipe this line:  chmod 411 ${D}${bindir}/sudo
>
> And the sudo - binary in sudo/1.8.6p7-r2/image/usr/bin has the right modes for binary, but when it gets installed to actual image the suid - bit is lost.
>
> Any idea how to fix that? Since the sudo is part of the poky I would thought it would work without too much of a hassle.
>
What version of poky are you using?  I just checked the master git and 
it appears to be correct with master.

Sau!

> Teemu Keskinarkaus
>
>
>
> ________________________________
>
> Actuant Corporation Email Notice
>
> This message is intended only for the use of the Addressee and may contain information that is PRIVILEGED and/or CONFIDENTIAL.
> This email is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this email is not an intended recipient, you have received this email in error and any review, dissemination, distribution or copying is strictly prohibited.
> If you have received this email in error, please notify the sender immediately by return mail and permanently delete the copy you received.
>
> Thank you.
> _______________________________________________
> poky mailing list
> poky@yoctoproject.org
> https://lists.yoctoproject.org/listinfo/poky
>
>

Re: Sudo binary missing suid - bit

[Keskinarkaus, Teemu]

> From: Saul Wold [mailto:sgw@linux.intel.com]
> On 10/01/2013 02:41 AM, Keskinarkaus, Teemu wrote:
>  > Ups. I meant mode 4111.
> > Any idea how to fix that? Since the sudo is part of the poky I would thought it would work without too much of a hassle.
> What version of poky are you using?  I just checked the master git and it appears to be correct with master.
We are using Dylan - branch. I tried to think the reason why we are using that, but couldn't think of one. There must be some reason I remember when we started. Maybe the Dylan - branch was thought to be more stable than the master - branch?

Teemu Keskinarkaus

________________________________

Actuant Corporation Email Notice

This message is intended only for the use of the Addressee and may contain information that is PRIVILEGED and/or CONFIDENTIAL.
This email is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this email is not an intended recipient, you have received this email in error and any review, dissemination, distribution or copying is strictly prohibited.
If you have received this email in error, please notify the sender immediately by return mail and permanently delete the copy you received.

Thank you.

Re: Sudo binary missing suid - bit

[Keskinarkaus, Teemu]

>From: poky-bounces@yoctoproject.org [mailto:poky-bounces@yoctoproject.org] On Behalf Of Keskinarkaus, Teemu
>> From: Saul Wold [mailto:sgw@linux.intel.com] On 10/01/2013 02:41 AM,
>> Keskinarkaus, Teemu wrote:
>>  > Ups. I meant mode 4111.
>> > Any idea how to fix that? Since the sudo is part of the poky I would thought it would work without too much of a hassle.
>> What version of poky are you using?  I just checked the master git and it appears to be correct with master.
>We are using Dylan - branch. I tried to think the reason why we are using that, but couldn't think of one. There must be some reason I remember when we started. Maybe the Dylan - branch was thought to be more stable than the master - >branch?

I tested with master - branch and still same result. If I create new user and try to use all I get is this:

~$ sudo ls
sudo: effective uid is not 0, is sudo installed setuid root?

That user is in /etc/sudoers - file and will work if I'll fix the suid-bit from /usr/bin/sudo.

Here is what /usr/bin/sudo is now:
-rwxr-xr-x 1 root root 123224 Oct  3 07:07 /usr/bin/sudo

Here what it supposed to be or how it is tried to be set in recipe:
---s--x--x 1 root root 123224 Oct  3 07:07 /usr/bin/sudo

So using master-branch wasn't solving anything in my case. Of course sudo 'works' if you test it with root user, but you don't need sudo with root anyway.

Teemu Keskinarkaus

________________________________

Actuant Corporation Email Notice

This message is intended only for the use of the Addressee and may contain information that is PRIVILEGED and/or CONFIDENTIAL.
This email is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this email is not an intended recipient, you have received this email in error and any review, dissemination, distribution or copying is strictly prohibited.
If you have received this email in error, please notify the sender immediately by return mail and permanently delete the copy you received.

Thank you.