Re: root-owned ~/.cfengine on HP-UX?

[Mark . Burgess]

On  9 Jan, Thomas Glanzmann wrote:
>> the directory ~/.cfengine gets created, but instead of being owned by the
>> user running the script, it's owned by root, even though the cfagent
>> binary is actually owned by bin:bin.  I've also chowned db and openssl to
>> bin:bin.  Nothing in this chain is owned by root, nothing is setuid to
>> anything, much less to root.
>> 
>> I'm incredibly confused.  It's not breaking any security rules -- you can
>> normally chown directories to other users, even root -- but it only does
>> so on HP-UX, not Solaris.
> 
> Not that confusing. Use grep. Have a look at the Sources ...
> 
> in src/init.c line 86. I think it is a bug. But ask Mark.

Yes, it should say,

chown(VLOCKDIR,getuid(),getgid());


M
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~