Debian bug report logs - #1709 , boring messages ----------------------------------------------------------------------- Message sent to debian-devel@pixar.com: Subject: Bug#1709: /usr/sbin/pppd needs to be setuid (chmod u+s) Reply-To: swift@bu.edu, debian-bugs@pixar.com Resent-From: Matthew Swift Resent-To: debian-devel@pixar.com Resent-Date: Fri, 20 Oct 1995 01:18:02 GMT Resent-Message-ID: Resent-Sender: iwj10@cus.cam.ac.uk X-Debian-PR-Package: ppp X-Debian-PR-Keywords: Received: via spool for debian-bugs; Fri, 20 Oct 1995 01:18:02 GMT Received: with rfc822 via encapsulated-mail; Fri, 20 Oct 1995 01:15:45 GMT Received: from pixar.com by mongo.pixar.com with smtp (Smail3.1.28.1 #15) id m0t662k-000Bg6C; Thu, 19 Oct 95 18:14 PDT Received: from aleph.bu.edu (PPP-84-7.BU.EDU) by pixar.com with SMTP id AA09747 (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Thu, 19 Oct 1995 18:14:15 -0700 Received: (from swift@localhost) by aleph.bu.edu (8.6.12/8.6.9) id VAA01289; Thu, 19 Oct 1995 21:14:31 -0400 Date: Thu, 19 Oct 1995 21:14:31 -0400 Message-Id: <199510200114.VAA01289@aleph.bu.edu> From: Matthew Swift To: debian-bugs@pixar.com Cc: swift@bu.edu, debian-users@pixar.com Package: ppp Version: 2.2-1 The pppd executable needs to have the setuid bit set when it is installed. Otherwise you get the kind of errors listed below at the end. These lines in the ppp.deb source pppd/Makefile are correct, but somehow they aren't percolating into the right actions in the Debian package: ---------- install: pppd mkdir -p $(BINDIR) install -c -m 4555 -o root pppd $(BINDIR)/pppd --------- ----------------- bash# dpkg -i ppp-2.2-1.deb (Reading database ... 19738 files and directories currently installed.) Preparing to replace ppp (using ppp-2.2-1.deb) ... Unpacking replacement ppp ... Setting up ppp ... bash# ls -la /usr/sbin/pppd -rwxr-xr-x 1 root root 90823 Oct 3 21:48 /usr/sbin/pppd ------------- The errors are e.g.: ----------- Oct 19 20:10:15 aleph kernel: registered device ppp0 Oct 19 20:10:15 aleph pppd[288]: pppd 2.2.0 started by swift, uid 501 [everything going fine here; we reach my provider, log in, etc.] Oct 19 20:10:36 aleph pppd[288]: Serial connection established. Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGUNIT): Operation not permitted Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGDEBUG): Operation not permitted Oct 19 20:10:37 aleph pppd[288]: Exit. ------------ ----------------------------------------------------------------------- Message sent: From: iwj10@thor.cam.ac.uk (Ian Jackson) To: swift@bu.edu Subject: Bug#1709: Acknowledgement (was: /usr/sbin/pppd needs to be setuid (chmod u+s)) In-Reply-To: <199510200114.VAA01289@aleph.bu.edu> References: <199510200114.VAA01289@aleph.bu.edu> Thank you for the problem report you have sent regarding Debian GNU/Linux. This is an automatically generated reply, to let you know your message has been received. It is being forwarded to the developers' mailing list for their attention; they will reply in due course. If you wish to submit further information on your problem, please send it to debian-bugs@pixar.com, but please ensure that the Subject line of your message starts with "Bug#1709" or "Re: Bug#1709" so that we can identify it as relating to the same problem. Please do not reply to the address at the top of this message, unless you wish to report a problem with the bug-tracking system. Ian Jackson (maintainer, debian-bugs) ----------------------------------------------------------------------- Message sent to debian-devel@pixar.com: Subject: Bug#1709: usr/sbin/pppd needs to be setuid (chmod u+s) Reply-To: Ian Murdock , debian-bugs@pixar.com Resent-From: Ian Murdock Resent-To: debian-devel@pixar.com Resent-Date: Fri, 20 Oct 1995 01:48:01 GMT Resent-Message-ID: Resent-Sender: iwj10@cus.cam.ac.uk X-Debian-PR-Package: ppp X-Debian-PR-Keywords: Received: via spool for debian-bugs; Fri, 20 Oct 1995 01:48:01 GMT Received: with rfc822 via encapsulated-mail; Fri, 20 Oct 1995 01:33:00 GMT Received: from pixar.com by mongo.pixar.com with smtp (Smail3.1.28.1 #15) id m0t66JJ-0006GWC; Thu, 19 Oct 95 18:31 PDT Received: from imagine.imaginit.com by pixar.com with SMTP id AA10590 (5.67b/IDA-1.5 for debian-bugs-done-pipe@mongo.pixar.com); Thu, 19 Oct 1995 18:31:17 -0700 Received: by imagine.imaginit.com id (Debian /\oo/\ Smail3.1.29.1 #29.33); Thu, 19 Oct 95 20:34 EST Message-Id: Date: Thu, 19 Oct 95 20:34 EST From: Ian Murdock To: swift@bu.edu, debian-bugs@Pixar.com Cc: debian-bugs-done@Pixar.com In-Reply-To: <199510200114.VAA01289@aleph.bu.edu> (message from Matthew Swift on Thu, 19 Oct 1995 21:14:31 -0400) Date: Thu, 19 Oct 1995 21:14:31 -0400 From: Matthew Swift The pppd executable needs to have the setuid bit set when it is installed. No, this was done intentionally. Making pppd setuid root is a huge security hole. The solution is to run pppd as root. There really isn't any reason for normal users to be executing it. ----------------------------------------------------------------------- Message sent: From: iwj10@thor.cam.ac.uk (Ian Jackson) To: Ian Murdock Subject: Bug#1709: Info received (was Bug#1709: /usr/sbin/pppd needs to be setuid (chmod u+s)) In-Reply-To: References: Thank you for the additional information you have supplied regarding this problem report. It has been forwarded to the developers to accompany the original report. If you wish to continue to submit further information on your problem, please do the same thing again: send it to debian-bugs@pixar.com, ensuring that the Subject line starts with "Bug#1709" or "Re: Bug#1709" so that we can identify it as relating to the same problem. Please do not reply to the address at the top of this message, unless you wish to report a problem with the bug-tracking system. Ian Jackson (maintainer, debian-bugs) ----------------------------------------------------------------------- Message sent: From: iwj10@thor.cam.ac.uk (Ian Jackson) To: Ian Murdock In-Reply-To: References: <199510200114.VAA01289@aleph.bu.edu> Subject: Bug#1709: marked as done (was: /usr/sbin/pppd needs to be setuid (chmod u+s)) Your message dated Thu, 19 Oct 95 20:34 EST with message-id and subject line Bug#1709: /usr/sbin/pppd needs to be setuid (chmod u+s) has caused the attached bug report to be marked as done. It is your now responsibility to ensure that the bug report is dealt with. (NB: If you are a system administrator and have no idea what I'm talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Ian Jackson (maintainer, debian-bugs) Received: with rfc822 via encapsulated-mail; Fri, 20 Oct 1995 01:15:45 GMT From bu.edu!swift Thu Oct 19 18:14:42 1995 Return-Path: Received: from pixar.com by mongo.pixar.com with smtp (Smail3.1.28.1 #15) id m0t662k-000Bg6C; Thu, 19 Oct 95 18:14 PDT Received: from aleph.bu.edu (PPP-84-7.BU.EDU) by pixar.com with SMTP id AA09747 (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Thu, 19 Oct 1995 18:14:15 -0700 Received: (from swift@localhost) by aleph.bu.edu (8.6.12/8.6.9) id VAA01289; Thu, 19 Oct 1995 21:14:31 -0400 Date: Thu, 19 Oct 1995 21:14:31 -0400 Message-Id: <199510200114.VAA01289@aleph.bu.edu> From: Matthew Swift To: debian-bugs@pixar.com Cc: swift@bu.edu, debian-users@pixar.com Subject: /usr/sbin/pppd needs to be setuid (chmod u+s) Reply-To: swift@bu.edu Package: ppp Version: 2.2-1 The pppd executable needs to have the setuid bit set when it is installed. Otherwise you get the kind of errors listed below at the end. These lines in the ppp.deb source pppd/Makefile are correct, but somehow they aren't percolating into the right actions in the Debian package: ---------- install: pppd mkdir -p $(BINDIR) install -c -m 4555 -o root pppd $(BINDIR)/pppd --------- ----------------- bash# dpkg -i ppp-2.2-1.deb (Reading database ... 19738 files and directories currently installed.) Preparing to replace ppp (using ppp-2.2-1.deb) ... Unpacking replacement ppp ... Setting up ppp ... bash# ls -la /usr/sbin/pppd -rwxr-xr-x 1 root root 90823 Oct 3 21:48 /usr/sbin/pppd ------------- The errors are e.g.: ----------- Oct 19 20:10:15 aleph kernel: registered device ppp0 Oct 19 20:10:15 aleph pppd[288]: pppd 2.2.0 started by swift, uid 501 [everything going fine here; we reach my provider, log in, etc.] Oct 19 20:10:36 aleph pppd[288]: Serial connection established. Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGUNIT): Operation not permitted Oct 19 20:10:37 aleph pppd[288]: ioctl(PPPIOCGDEBUG): Operation not permitted Oct 19 20:10:37 aleph pppd[288]: Exit. ------------ ----------------------------------------------------------------------- Message sent: From: iwj10@thor.cam.ac.uk (Ian Jackson) To: swift@bu.edu Subject: Bug#1709 acknowledged by developer (was: /usr/sbin/pppd needs to be setuid (chmod u+s)) References: <199510200114.VAA01289@aleph.bu.edu> In-Reply-To: <199510200114.VAA01289@aleph.bu.edu> This is an automatic notification regarding your bug report. Responsibility for it has been taken by one of the developers, namely Ian Murdock . You should be hearing from them with a substantive response shortly, if you have not already done so. If not, please contact them directly, or email debian-bugs@pixar.com or myself. Ian Jackson (maintainer, debian-bugs) ----------------------------------------------------------------------- Ian Jackson / iwj10@thor.cam.ac.uk , with the debian-bugs tracking mechanism This page last modified 07:43:01 GMT Wed 01 Nov