BackupPC-users

Re: [BackupPC-users] Dealing with setuid bit in debian wheeze 7.0 (SOLVED)

2013-06-03 12:30:50
Subject: Re: [BackupPC-users] Dealing with setuid bit in debian wheeze 7.0 (SOLVED)
From: Eduardo Díaz Rodríguez <ediaz AT pk25 DOT com>
To: backuppc-users AT lists.sourceforge DOT net
Date: Mon, 03 Jun 2013 18:28:48 +0200

Craig, are you going to add this one to the next revision of backuppc?..


I am glad to help. :)

On 2013-06-02 21:32, Eduardo Díaz Rodríguez wrote:

Solved! I think that is interesting if anybod wants to solve this for the future verions of backuppc. and Craig will be interesing to add as extension of something to the package.

I download the file cgi form backuppc admin and I rename the file as BackupPC_Admin, but nothing...

I will go to strace to see what make this nasty boy :-P

www-data AT pk25 DOT com:/dominios/pk25.com/cgi-bin/gestion/backuppc$ strace ./BackupPC_Admin
execve("./BackupPC_Admin", ["./BackupPC_Admin"], [/* 16 vars */]) = 0
brk(0)                                  = 0x8843000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb773c000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=65791, ...}) = 0
mmap2(NULL, 65791, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb772b000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/i386-linux-gnu/i686/cmov/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240o\1\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1437864, ...}) = 0
mmap2(NULL, 1452408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb75c8000
mprotect(0xb7724000, 4096, PROT_NONE)   = 0
mmap2(0xb7725000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15c) = 0xb7725000
mmap2(0xb7728000, 10616, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7728000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb75c7000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb75c78d0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0xb7725000, 8192, PROT_READ)   = 0
mprotect(0xb775b000, 4096, PROT_READ)   = 0
munmap(0xb772b000, 65791)               = 0
execve("/usr/share/backuppc/lib/realindex.cgi", ["./BackupPC_Admin"], [/* 16 vars */]) = -1 ENOENT (No such file or directory)
exit_group(0)                           = ?

ohh they go to /usr/share/backuppc/lib/realindex.cgi for exec the real file, great!, I move the real file to here..

-r-xr-xr-- 1 backuppc www-data 3993 jun  2 21:09 realindex.cgi
pk25.com:/usr/share/backuppc/lib#

Try to go for the webpage and... RUNS!!!

I don't make a super testing but see thats works...

Regards!!!

On 2013-06-02 21:02, Eduardo Díaz Rodríguez wrote:

I see the problem here..

http://unix.stackexchange.com/questions/364/allow-setuid-on-shell-scripts

I make some searching in the BackupPC_Admin (form debian package of backuppc and (is a exec file!!!).

I think that I will go to compile the file or better.. Use from the backuppc debian package ;)

On 2013-06-02 20:34, Eduardo Díaz Rodríguez wrote:

Hi every body.

After of some trys and have some servers in debian 6.0 release I upgrade my enviroment to debian 7.0

I wander to discover that the same permisions that use in debian 6.0 for run my BackupPC_Admin cgi-bin scripts is not valid anymore :(.

I don't know why.. is the same installation (I search in debian and see thats, is not perl-suid anymore)

This are my current permisions.

drwxr-xr-x 2 root     root       43 jun  2 19:54 .
drwxr-xr-x 4 root     root       54 jul 26  2006 ..
-r-sr-xr-- 1 backuppc www-data 3993 jul 15  2011 BackupPC_Admin

root@servidorvitrum:/datos/asdfasdf/dominios/asdfasdf.com/cgi-bin/gestion/backuppc# ./a
My userid is 0 (root)
root@servidorvitrum:/datos/asdfasdf/dominios/asdfasdf.com/cgi-bin/gestion/backuppc# ls -al
total 12
drwxr-xr-x 2 root     root       51 Jun  2 19:06 .
drwxr-xr-x 3 root     root       21 Jun  1 20:15 ..
-r-sr-x--- 1 backuppc www-data   69 Jun  2 19:06 a
-rwsr-x--- 1 backuppc www-data 3993 Jun  1 20:16 BackupPC_Admin
-rw-r--r-- 1 root     root      311 Jun  2 18:27 .htaccess

I know the "other alternatives" for use the interface (like run apache2 in backuppc user, but I want to keep the minimal changes of this... and I like this one because I have many services running in my home server... :(..

I like to know how anybody solve this issue in the new debian versions... ???


Thanks for your time..

 

-- 
======================================================================================= Al aprendiz sin pelo, jodelo. =======================================================================================

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2

_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

 

-- 
======================================================================================= Al aprendiz sin pelo, jodelo. =======================================================================================

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2

_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

 

-- 
======================================================================================= Al aprendiz sin pelo, jodelo. =======================================================================================

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2

_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

 

-- 
======================================================================================= Como canta el abad responde el monaguillo. =======================================================================================
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
<Prev in Thread] Current Thread [Next in Thread>