Debian bug report logs - #1709, boring messages

Subject: Bug#1709: /usr/sbin/pppd needs to be setuid (chmod u+s)
Reply-To: swift@bu.edu, debian-bugs@pixar.com
Resent-From: Matthew Swift <swift@bu.edu>
Resent-To: debian-devel@pixar.com
Resent-Date: Fri, 20 Oct 1995 01:18:02 GMT
Resent-Message-ID: <debian-bugs-handler.1709.B10200115470@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: ppp
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Fri, 20 Oct 1995 01:18:02 GMT
Received: with rfc822 via encapsulated-mail; Fri, 20 Oct 1995 01:15:45 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t662k-000Bg6C; Thu, 19 Oct 95 18:14 PDT
Received: from aleph.bu.edu (PPP-84-7.BU.EDU) by pixar.com with SMTP id AA09747
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Thu, 19 Oct 1995 18:14:15 -0700
Received: (from swift@localhost) by aleph.bu.edu (8.6.12/8.6.9) id VAA01289; Thu, 19 Oct 1995 21:14:31 -0400
Date: Thu, 19 Oct 1995 21:14:31 -0400
Message-Id: <199510200114.VAA01289@aleph.bu.edu>
From: Matthew Swift <swift@bu.edu>
To: debian-bugs@pixar.com
Cc: swift@bu.edu, debian-users@pixar.com


Package: ppp
Version: 2.2-1

The pppd executable needs to have the setuid bit set when it is installed.

Otherwise you get the kind of errors listed below at the end.

These lines in the ppp.deb source pppd/Makefile are correct, but somehow they
aren't percolating into the right actions in the Debian package:

----------
install: pppd
	mkdir -p $(BINDIR)
	install -c -m 4555 -o root pppd $(BINDIR)/pppd
---------

-----------------
bash# dpkg -i ppp-2.2-1.deb
(Reading database ... 19738 files and directories currently installed.)
Preparing to replace ppp (using ppp-2.2-1.deb) ...
Unpacking replacement ppp ...
Setting up ppp ...

bash# ls -la /usr/sbin/pppd
-rwxr-xr-x   1 root     root        90823 Oct  3 21:48 /usr/sbin/pppd
-------------

The errors are e.g.:
-----------
Oct 19 20:10:15 aleph kernel: registered device ppp0
Oct 19 20:10:15 aleph pppd[288]: pppd 2.2.0 started by swift, uid 501

[everything going fine here; we reach my provider, log in, etc.]

Oct 19 20:10:36 aleph pppd[288]: Serial connection established.
Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGUNIT): Operation not permitted
Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGDEBUG): Operation not permitted
Oct 19 20:10:37 aleph pppd[288]: Exit.
------------

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: swift@bu.edu
Subject: Bug#1709: Acknowledgement (was: /usr/sbin/pppd needs to be setuid (chmod u+s))
In-Reply-To: <199510200114.VAA01289@aleph.bu.edu>
References: <199510200114.VAA01289@aleph.bu.edu>

Thank you for the problem report you have sent regarding Debian GNU/Linux.
This is an automatically generated reply, to let you know your message has
been received.  It is being forwarded to the developers' mailing list for
their attention; they will reply in due course.

If you wish to submit further information on your problem, please send
it to debian-bugs@pixar.com, but please ensure that the Subject
line of your message starts with "Bug#1709" or "Re: Bug#1709" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)

Subject: Bug#1709: usr/sbin/pppd needs to be setuid (chmod u+s)
Reply-To: Ian Murdock <imurdock@debian.org>, debian-bugs@pixar.com
Resent-From: Ian Murdock <imurdock@debian.org>
Resent-To: debian-devel@pixar.com
Resent-Date: Fri, 20 Oct 1995 01:48:01 GMT
Resent-Message-ID: <debian-bugs-handler.1709.B10200133020@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: ppp
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Fri, 20 Oct 1995 01:48:01 GMT
Received: with rfc822 via encapsulated-mail; Fri, 20 Oct 1995 01:33:00 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t66JJ-0006GWC; Thu, 19 Oct 95 18:31 PDT
Received: from imagine.imaginit.com by pixar.com with SMTP id AA10590
  (5.67b/IDA-1.5 for debian-bugs-done-pipe@mongo.pixar.com); Thu, 19 Oct 1995 18:31:17 -0700
Received: by imagine.imaginit.com
	id <m0t66M2-0001dOC@imagine.imaginit.com>
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Thu, 19 Oct 95 20:34 EST
Message-Id: <m0t66M2-0001dOC@imagine.imaginit.com>
Date: Thu, 19 Oct 95 20:34 EST
From: Ian Murdock <imurdock@debian.org>
To: swift@bu.edu, debian-bugs@Pixar.com
Cc: debian-bugs-done@Pixar.com
In-Reply-To: <199510200114.VAA01289@aleph.bu.edu> (message from Matthew Swift
	on Thu, 19 Oct 1995 21:14:31 -0400)

   Date: Thu, 19 Oct 1995 21:14:31 -0400
   From: Matthew Swift <swift@bu.edu>

   The pppd executable needs to have the setuid bit set when it is
   installed.

No, this was done intentionally.  Making pppd setuid root is a huge
security hole.

The solution is to run pppd as root.  There really isn't any reason
for normal users to be executing it.

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Ian Murdock <imurdock@debian.org>
Subject: Bug#1709: Info received (was Bug#1709: /usr/sbin/pppd needs to be setuid (chmod u+s))
In-Reply-To: <m0t66M2-0001dOC@imagine.imaginit.com>
References: <m0t66M2-0001dOC@imagine.imaginit.com>

Thank you for the additional information you have supplied regarding
this problem report.  It has been forwarded to the developers to
accompany the original report.

If you wish to continue to submit further information on your problem,
please do the same thing again: send it to debian-bugs@pixar.com, ensuring
that the Subject line starts with "Bug#1709" or "Re: Bug#1709" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Ian Murdock <imurdock@debian.org>
In-Reply-To: <m0t66M2-0001dOC@imagine.imaginit.com>
References: <m0t66M2-0001dOC@imagine.imaginit.com> <199510200114.VAA01289@aleph.bu.edu>
Subject: Bug#1709: marked as done (was: /usr/sbin/pppd needs to be setuid (chmod u+s))

Your message dated Thu, 19 Oct 95 20:34 EST
with message-id <m0t66M2-0001dOC@imagine.imaginit.com>
and subject line Bug#1709: /usr/sbin/pppd needs to be setuid (chmod u+s)
has caused the attached bug report to be marked as done.

It is your now responsibility to ensure that the bug report is dealt
with.

(NB: If you are a system administrator and have no idea what I'm
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Ian Jackson
(maintainer, debian-bugs)

Received: with rfc822 via encapsulated-mail; Fri, 20 Oct 1995 01:15:45 GMT
From bu.edu!swift Thu Oct 19 18:14:42 1995
Return-Path: <swift@bu.edu>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t662k-000Bg6C; Thu, 19 Oct 95 18:14 PDT
Received: from aleph.bu.edu (PPP-84-7.BU.EDU) by pixar.com with SMTP id AA09747
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Thu, 19 Oct 1995 18:14:15 -0700
Received: (from swift@localhost) by aleph.bu.edu (8.6.12/8.6.9) id VAA01289; Thu, 19 Oct 1995 21:14:31 -0400
Date: Thu, 19 Oct 1995 21:14:31 -0400
Message-Id: <199510200114.VAA01289@aleph.bu.edu>
From: Matthew Swift <swift@bu.edu>
To: debian-bugs@pixar.com
Cc: swift@bu.edu, debian-users@pixar.com
Subject: /usr/sbin/pppd needs to be setuid (chmod u+s)
Reply-To: swift@bu.edu


Package: ppp
Version: 2.2-1

The pppd executable needs to have the setuid bit set when it is installed.

Otherwise you get the kind of errors listed below at the end.

These lines in the ppp.deb source pppd/Makefile are correct, but somehow they
aren't percolating into the right actions in the Debian package:

----------
install: pppd
	mkdir -p $(BINDIR)
	install -c -m 4555 -o root pppd $(BINDIR)/pppd
---------

-----------------
bash# dpkg -i ppp-2.2-1.deb
(Reading database ... 19738 files and directories currently installed.)
Preparing to replace ppp (using ppp-2.2-1.deb) ...
Unpacking replacement ppp ...
Setting up ppp ...

bash# ls -la /usr/sbin/pppd
-rwxr-xr-x   1 root     root        90823 Oct  3 21:48 /usr/sbin/pppd
-------------

The errors are e.g.:
-----------
Oct 19 20:10:15 aleph kernel: registered device ppp0
Oct 19 20:10:15 aleph pppd[288]: pppd 2.2.0 started by swift, uid 501

[everything going fine here; we reach my provider, log in, etc.]

Oct 19 20:10:36 aleph pppd[288]: Serial connection established.
Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGUNIT): Operation not permitted
Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGDEBUG): Operation not permitted
Oct 19 20:10:37 aleph pppd[288]: Exit.
------------

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: swift@bu.edu
Subject: Bug#1709 acknowledged by developer (was: /usr/sbin/pppd needs to be setuid (chmod u+s))
References: <m0t66M2-0001dOC@imagine.imaginit.com> <199510200114.VAA01289@aleph.bu.edu>
In-Reply-To: <199510200114.VAA01289@aleph.bu.edu>

This is an automatic notification regarding your bug report.

Responsibility for it has been taken by one of the developers, namely
Ian Murdock <imurdock@debian.org>.

You should be hearing from them with a substantive response shortly, if
you have not already done so.  If not, please contact them directly,
or email debian-bugs@pixar.com or myself.

Ian Jackson
(maintainer, debian-bugs)