Solved! I think that is interesting if anybod wants to solve this for the future verions of backuppc. and Craig will be interesing to add as extension of something to the package.
I download the file cgi form backuppc admin and I rename the file as BackupPC_Admin, but nothing...
I will go to strace to see what make this nasty boy :-P
www-data AT pk25 DOT com:/dominios/pk25.com/cgi-bin/gestion/backuppc$ strace ./BackupPC_Admin execve("./BackupPC_Admin", ["./BackupPC_Admin"], [/* 16 vars */]) = 0 brk(0) = 0x8843000 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb773c000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=65791, ...}) = 0 mmap2(NULL, 65791, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb772b000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i386-linux-gnu/i686/cmov/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240o\1\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1437864, ...}) = 0 mmap2(NULL, 1452408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb75c8000 mprotect(0xb7724000, 4096, PROT_NONE) = 0 mmap2(0xb7725000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15c) = 0xb7725000 mmap2(0xb7728000, 10616, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7728000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb75c7000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb75c78d0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xb7725000, 8192, PROT_READ) = 0 mprotect(0xb775b000, 4096, PROT_READ) = 0 munmap(0xb772b000, 65791) = 0 execve("/usr/share/backuppc/lib/realindex.cgi", ["./BackupPC_Admin"], [/* 16 vars */]) = -1 ENOENT (No such file or directory) exit_group(0) = ?
ohh they go to /usr/share/backuppc/lib/realindex.cgi for exec the real file, great!, I move the real file to here..
-r-xr-xr-- 1 backuppc www-data 3993 jun 2 21:09 realindex.cgi pk25.com:/usr/share/backuppc/lib#
Try to go for the webpage and... RUNS!!!
I don't make a super testing but see thats works...
Regards!!!
On 2013-06-02 21:02, Eduardo Díaz Rodríguez wrote:
I see the problem here..
http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts
I make some searching in the BackupPC_Admin (form debian package of backuppc and (is a exec file!!!).
I think that I will go to compile the file or better.. Use from the backuppc debian package ;)
On 2013-06-02 20:34, Eduardo Díaz Rodríguez wrote:
Hi every body.
After of some trys and have some servers in debian 6.0 release I upgrade my enviroment to debian 7.0
I wander to discover that the same permisions that use in debian 6.0 for run my BackupPC_Admin cgi-bin scripts is not valid anymore :(.
I don't know why.. is the same installation (I search in debian and see thats, is not perl-suid anymore)
This are my current permisions.
drwxr-xr-x 2 root root 43 jun 2 19:54 . drwxr-xr-x 4 root root 54 jul 26 2006 .. -r-sr-xr-- 1 backuppc www-data 3993 jul 15 2011 BackupPC_Admin
root@servidorvitrum:/datos/asdfasdf/dominios/asdfasdf.com/cgi-bin/gestion/backuppc# ./a My userid is 0 (root) root@servidorvitrum:/datos/asdfasdf/dominios/asdfasdf.com/cgi-bin/gestion/backuppc# ls -al total 12 drwxr-xr-x 2 root root 51 Jun 2 19:06 . drwxr-xr-x 3 root root 21 Jun 1 20:15 .. -r-sr-x--- 1 backuppc www-data 69 Jun 2 19:06 a -rwsr-x--- 1 backuppc www-data 3993 Jun 1 20:16 BackupPC_Admin -rw-r--r-- 1 root root 311 Jun 2 18:27 .htaccess
I know the "other alternatives" for use the interface (like run apache2 in backuppc user, but I want to keep the minimal changes of this... and I like this one because I have many services running in my home server... :(..
I like to know how anybody solve this issue in the new debian versions... ???
Thanks for your time..
-- =======================================================================================
Al aprendiz sin pelo, jodelo.
=======================================================================================
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki: http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
-- =======================================================================================
Al aprendiz sin pelo, jodelo.
=======================================================================================
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki: http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
-- =======================================================================================
Al aprendiz sin pelo, jodelo.
=======================================================================================
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2 _______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki: http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
|