Re: root-owned ~/.cfengine on HP-UX?

[Thomas Glanzmann]

> the directory ~/.cfengine gets created, but instead of being owned by the
> user running the script, it's owned by root, even though the cfagent
> binary is actually owned by bin:bin.  I've also chowned db and openssl to
> bin:bin.  Nothing in this chain is owned by root, nothing is setuid to
> anything, much less to root.
> 
> I'm incredibly confused.  It's not breaking any security rules -- you can
> normally chown directories to other users, even root -- but it only does
> so on HP-UX, not Solaris.

Not that confusing. Use grep. Have a look at the Sources ...

in src/init.c line 86. I think it is a bug. But ask Mark.

(faui03) [~] touch hello
(faui03) [~] chown 0.0 hello
chown: changing ownership of `hello': Not owner
(faui03) [~] ls -al hello
-rw-r--r--    1 sithglan icipguru        0 Jan  9 19:28 hello

As you can see. A normal user under solaris can't change the ownership of a file
to root. And I guess that it is different on HP UX. Just try it and let me know.

Greetings,
        Thomas
--
Thomas Glanzmann  ++49 (0) 9131 85-27574   Department of Computer Science III
Martensstrasse 3  D-91058 Erlangen Germany   University of Erlangen-Nuremberg
            http://www3.informatik.uni-erlangen.de/Research/UMLinux/