Backup Central

Hello everybody,
I recently upgraded my Debian(sarge)-packages of amanda to version
2.4.4p2-2, which caused a total mess of permissions/ownerships in /usr/sbin:

-rwxr-xr-x 1 root root 31156 2004-03-15 08:16 /usr/sbin/amadmin
-rwsr-x--- 1 root backup 36148 2004-03-15 08:16 /usr/sbin/amcheck
-rwxr-xr-x 1 root root 1790 2004-03-15 08:16 /usr/sbin/amcheckdb
-rwxr-xr-x 1 root root 3915 2004-03-15 08:16 /usr/sbin/amcleanup
-rwxr-xr-x 1 root root 6988 2004-03-15 08:16 /usr/sbin/amdd
-rwxr-xr-x 1 root root 3723 2004-03-15 08:16 /usr/sbin/amdump
-rwxr-xr-x 1 root root 14632 2004-03-15 08:16 /usr/sbin/amflush
-rwxr-xr-x 1 root root 9028 2004-03-15 08:16 /usr/sbin/amgetconf
-rwxr-xr-x 1 root root 10592 2004-03-15 08:16 /usr/sbin/amlabel
-rwxr-xr-x 1 root root 7280 2004-03-15 08:16 /usr/sbin/ammt
-rwxr-xr-x 1 root root 4474 2004-03-15 08:16 /usr/sbin/amoverview
-rwxr-xr-x 1 root root 4567 2004-03-15 08:16 /usr/sbin/amplot
-rwxr-xr-x 1 root root 60760 2004-03-15 08:16 /usr/sbin/amrecover
-rwxr-xr-x 1 root root 38648 2004-03-15 08:16 /usr/sbin/amreport
-rwxr-xr-x 1 root root 15044 2004-03-15 08:16 /usr/sbin/amrestore
-rwxr-xr-x 1 root root 6814 2004-03-15 08:16 /usr/sbin/amrmtape
-rwxr-xr-x 1 root root 32862 2004-03-15 08:16 /usr/sbin/amstatus
-rwxr-xr-x 1 root root 16084 2004-03-15 08:16 /usr/sbin/amtape
-rwxr-xr-x 1 root root 10292 2004-03-15 08:16 /usr/sbin/amtapetype
-rwxr-xr-x 1 root root 6888 2004-03-15 08:16 /usr/sbin/amtoc
-rwxr-xr-x 1 root root 11742 2004-03-15 08:16 /usr/sbin/amverify
-rwxr-xr-x 1 root root 1107 2004-03-15 08:16 /usr/sbin/amverifyrun

The amanda-user on Debian is "backup", group "backup".
I don't want to build amanda from scratch (since everything used to be working
fine), and I couldn't find a *complete* list of which files have to be
run suid root - suggestions welcome ;-)

So everything I have to do should be
$:# chown root:backup filestochange
$:# chmod 4750 filestochange
??
Sorry again for the FAQ, but after 2 hours research I gave up ;->

Thanks in advance,
Bernhard

--
Bernhard Ott

Bernhard Ott <b.ott < at > chello.at> writes:

Hello everybody,
I recently upgraded my Debian(sarge)-packages of amanda to version
2.4.4p2-2, which caused a total mess of permissions/ownerships in /usr/sbin:

On my SuSE 8.2 box with SuSE's Amanda RPM, I see these files setuid:
-rwsr-x--- 1 root disk 30017 Apr 16 2003 /usr/lib/amanda/calcsize
-rwsr-x--- 1 root disk 122300 Apr 16 2003 /usr/lib/amanda/dumper
-rwsr-x--- 1 root disk 27320 Apr 16 2003 /usr/lib/amanda/killpgrp
-rwsr-x--- 1 root disk 176228 Apr 16 2003 /usr/lib/amanda/planner
-rwsr-x--- 1 root disk 25485 Apr 16 2003 /usr/lib/amanda/rundump
-rwsr-x--- 1 root disk 26065 Apr 16 2003 /usr/lib/amanda/runtar
-rwsr-x--- 1 root disk 199765 Apr 16 2003 /usr/sbin/amcheck

No other files are setuid. No files at all are setgid.

HTH,

--
Matthias Andree

Encrypted mail welcome: my GnuPG key ID is 0x052E7D95

On Sun, Jun 20, 2004 at 02:18:22PM +0200, Bernhard Ott wrote:
Hello everybody,
I recently upgraded my Debian(sarge)-packages of amanda to version
2.4.4p2-2, which caused a total mess of permissions/ownerships in /usr/sbin:

...

The amanda-user on Debian is "backup", group "backup".
I don't want to build amanda from scratch (since everything used to be
working
fine), and I couldn't find a *complete* list of which files have to be
run suid root - suggestions welcome ;-)

So everything I have to do should be
$:# chown root:backup filestochange
$:# chmod 4750 filestochange
??
Sorry again for the FAQ, but after 2 hours research I gave up ;->

I only spent 5 min, but I'm surprised I did not find it in the FOM.


Here is my list under /usr/local:

$ find bin sbin libexec -perm -4000 -group backup -ls
-rwsr-x--- 1 root backup 53936 May 29 2003 sbin/amcheck
-rwsr-x--- 1 root backup 25236 Jun 1 2003 libexec/calcsize
-rwsr-x--- 1 root backup 22056 Jun 1 2003 libexec/killpgrp
-rwsr-x--- 1 root backup 20024 Jun 1 2003 libexec/rundump
-rwsr-x--- 1 root backup 51424 May 29 2003 libexec/dumper
-rwsr-x--- 1 root backup 51676 May 29 2003 libexec/planner
-rwsr-x--- 1 root backup 21144 Jun 1 2003 libexec/runtar

--
Jon H. LaBadie jon < at > jgcomp.com
JG Computing
4455 Province Line Road (609) 252-0159
Princeton, NJ 08540-4322 (609) 683-7220 (fax)

Matthias Andree wrote:

Bernhard Ott <b.ott < at > chello.at> writes:


Hello everybody,
I recently upgraded my Debian(sarge)-packages of amanda to version
2.4.4p2-2, which caused a total mess of permissions/ownerships in /usr/sbin:


On my SuSE 8.2 box with SuSE's Amanda RPM, I see these files setuid:
-rwsr-x--- 1 root disk 30017 Apr 16 2003 /usr/lib/amanda/calcsize
-rwsr-x--- 1 root disk 122300 Apr 16 2003 /usr/lib/amanda/dumper
-rwsr-x--- 1 root disk 27320 Apr 16 2003 /usr/lib/amanda/killpgrp
-rwsr-x--- 1 root disk 176228 Apr 16 2003 /usr/lib/amanda/planner
-rwsr-x--- 1 root disk 25485 Apr 16 2003 /usr/lib/amanda/rundump
-rwsr-x--- 1 root disk 26065 Apr 16 2003 /usr/lib/amanda/runtar
-rwsr-x--- 1 root disk 199765 Apr 16 2003 /usr/sbin/amcheck

No other files are setuid. No files at all are setgid.

HTH,

Thanks for the quick response, did help a lot!

Schönen Sonntag,
Bernhard

Jon LaBadie wrote:

I only spent 5 min, but I'm surprised I did not find it in the FOM.

The FOM is in great need of a decent cleanup. (Yes, I'm a volunteer,
but would like assistence of a native english speaking person.
Anybody knows who to contact to for FOM-maintenance?)

(Or maybe to be replaced by some wiki-pages?)


--
Paul Bijnens, Xplanation Tel +32 16 397.511
Technologielaan 21 bus 2, B-3001 Leuven, BELGIUM Fax +32 16 397.512
http://www.xplanation.com/ email: Paul.Bijnens < at > xplanation.com
***********************************************************************
* I think I've got the hang of it now: exit, ^D, ^C, ^\, ^Z, ^Q, F6, *
* quit, ZZ, :q, :q!, M-Z, ^X^C, logoff, logout, close, bye, /bye, *
* stop, end, F3, ~., ^]c, +++ ATH, disconnect, halt, abort, hangup, *
* PF4, F20, ^X^X, :, KJOB, F14-f-e, F8-e, kill -1 $$, shutdown, *
* kill -9 1, Alt-F4, Ctrl-Alt-Del, AltGr-NumLock, Stop-A, ... *
* ... "Are you sure?" ... YES ... Phew ... I'm out *
***********************************************************************