LWN.net Logo

Re: More PATH fallout. Who decided this was a good idea?

From:  Steve Grubb <sgrubb-AT-redhat.com>
To:  fedora-devel-list-AT-redhat.com
Subject:  Re: More PATH fallout. Who decided this was a good idea?
Date:  Fri, 5 Dec 2008 20:29:45 -0500
Message-ID:  <200812052029.45500.sgrubb@redhat.com>
Archive-link:  Article, Thread

On Friday 05 December 2008 18:27:01 Callum Lerwick wrote:
> So, I spent 10 minutes trying to figure out why "userm[tab]" only came
> up with usermount. usermod had disappeared from my system!

These should have been gone for quite a while...and on purpose. You cannot do 
anything with them unless you are root. Allowing anyone even to execute them 
would require lots of bad things for our LSPP/CAPP evaluations.


> -rwxr-x--- 1 root root  97000 2008-11-05 14:58 audispd
> -rwxr-x--- 1 root root 121056 2008-11-05 14:58 auditctl
> -rwxr-x--- 1 root root 175416 2008-11-05 14:58 auditd
> -rwxr-x--- 1 root root  98496 2008-11-05 14:58 autrace

The audit tools are protected from casual use for a reason.


> -rwxr-x--- 1 root root     47704 2008-09-24 08:38 groupadd
> -rwxr-x--- 1 root root     38832 2008-09-24 08:38 groupdel
> -rwxr-x--- 1 root root     33888 2008-09-24 08:38 groupmems
> -rwxr-x--- 1 root root     47608 2008-09-24 08:38 groupmod
> -rwxr-x--- 1 root root     83864 2008-09-24 08:38 useradd
> -rwxr-x--- 1 root root     56528 2008-09-24 08:38 userdel
> -rwxr-x--- 1 root root     82296 2008-09-24 08:38 usermod

These are required to be this way for our Common Criteria evaluations.


> As a sudo user, I believe that running admin tools such as usermod as an
> unprivileged user to get the help page is a perfectly valid use case,

You have a man page that should be accurate. If not file a bug.


> and this change is a bad idea that should be reversed.

Nope.

-Steve

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list



(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds