Re: [2.6.25-rc5-mm1] regression: cannot run Postfix sendmail command as non-root

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Tilman Schmidt
Date: Monday, March 17, 2008 - 6:35 am

Benjamin Thery schrieb:
ix-und-grsecurity
m.

The userspace failure described there is indeed the same as mine:
Postfix' sendmail command tries to open "/proc/net/if_inet6"
which fails with EACCES.

But I have never installed grsecurity on this machine, and the
problem appeared for me only with kernel 2.6.25-rc5-mm1, not when
running kernel 2.6.25-rc5 on the same machine, so I guess the
cause must be something different.

What's also strange is that I can "cat /proc/net/if_inet6" from
the command line as the same non-root user with no problem at all.
strace of "cat /proc/net/if_inet6" has:

open("/proc/net/if_inet6", O_RDONLY|O_LARGEFILE) =3D 3

strace of "/usr/sbin/sendmail", however:

open("/proc/net/if_inet6", O_RDONLY) =3D -1 EACCES (Permission denied)

Both run as

ts@xenon:~> id
uid=3D1000(ts) gid=3D100(users) groups=3D0(root),14(uucp),16(dialout),33(=
video),100(users),112(bacula)

HTH
T.

--=20
Tilman Schmidt                    E-Mail: tilman@imap.cc
Bonn, Germany
Diese Nachricht besteht zu 100% aus wiederverwerteten Bits.
Unge=F6ffnet mindestens haltbar bis: (siehe R=FCckseite)
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
2.6.25-rc5-mm1, Andrew Morton, (Tue Mar 11, 1:14 am)
[Build Faliure] 2.6.25-rc5-mm1 build fails , Kamalesh Babulal, (Tue Mar 11, 3:16 am)
Re: [Build Faliure] 2.6.25-rc5-mm1 build fails, Edward Shishkin, (Tue Mar 11, 3:56 am)
Re: 2.6.25-rc5-mm1 (paravirt/vsmp/no PCI), Randy Dunlap, (Tue Mar 11, 10:09 am)
Re: 2.6.25-rc5-mm1 (paravirt/vsmp/no PCI), Jeremy Fitzhardinge, (Tue Mar 11, 11:18 am)
Re: [Build Failure] 2.6.25-rc5-mm1 Build fails with allmod ..., Bartlomiej Zolnierki ..., (Tue Mar 11, 12:35 pm)
Re: [Build Failure] 2.6.25-rc5-mm1 Build fails with allmod ..., Bartlomiej Zolnierki ..., (Tue Mar 11, 12:36 pm)
Re: 2.6.25-rc5-mm1, serge, (Tue Mar 11, 1:23 pm)
Re: 2.6.25-rc5-mm1, Andrew Morton, (Tue Mar 11, 1:39 pm)
Re: 2.6.25-rc5-mm1 (paravirt/vsmp/no PCI), Ravikiran G Thirumalai, (Tue Mar 11, 5:10 pm)
Re: 2.6.25-rc5-mm1, Dave Young, (Tue Mar 11, 6:14 pm)
Re: 2.6.25-rc5-mm1 (paravirt/vsmp/no PCI), Randy Dunlap, (Tue Mar 11, 6:42 pm)
Re: 2.6.25-rc5-mm1 (paravirt/vsmp/no PCI), Jeremy Fitzhardinge, (Tue Mar 11, 6:51 pm)
Re: 2.6.25-rc5-mm1 (paravirt/vsmp/no PCI), Ingo Molnar, (Wed Mar 12, 12:14 am)
Re: 2.6.25-rc5-mm1 - x86_64 boot problem ?, Badari Pulavarty, (Wed Mar 12, 11:10 am)
Re: 2.6.25-rc5-mm1 - x86_64 boot problem ?, Andrew Morton, (Wed Mar 12, 11:15 am)
Re: 2.6.25-rc5-mm1, Torsten Kaiser, (Wed Mar 12, 12:33 pm)
Re: 2.6.25-rc5-mm1, Andrew Morton, (Wed Mar 12, 12:44 pm)
Re: 2.6.25-rc5-mm1, Torsten Kaiser, (Wed Mar 12, 1:01 pm)
Re: [BUG] 2.6.25-rc5-mm1 kernel panic with "Exception: 501 ..., Benjamin Herrenschmidt, (Wed Mar 12, 1:40 pm)
[2.6.25-rc5-mm1] BUG: spinlock bad magic early during boot, Tilman Schmidt, (Wed Mar 12, 4:54 pm)
[2.6.25-rc5-mm1] WARNING: at drivers/base/sys.c:173, Tilman Schmidt, (Wed Mar 12, 5:15 pm)
Re: 2.6.25-rc5-mm1 shutdown crash, Helge Hafting, (Thu Mar 13, 7:03 am)
Re: 2.6.25-rc5-mm1 shutdown crash, Andrew Morton, (Thu Mar 13, 9:12 am)
Re: 2.6.25-rc5-mm1 - x86_64 boot problem with git-sched.patch, Badari Pulavarty, (Thu Mar 13, 10:09 am)
Re: 2.6.25-rc5-mm1 - x86_64 boot problem with git-sched.patch, Badari Pulavarty, (Thu Mar 13, 10:40 am)
Re: 2.6.25-rc5-mm1 - x86_64 boot problem with git-sched.patch, Guillaume Chazarain, (Thu Mar 13, 10:55 am)
Re: 2.6.25-rc5-mm1 - x86_64 boot problem with git-sched.patch, Badari Pulavarty, (Thu Mar 13, 11:20 am)
Re: 2.6.25-rc5-mm1, Torsten Kaiser, (Thu Mar 13, 3:05 pm)
Re: 2.6.25-rc5-mm1: "consolechars" hangs on boot, Laurent Riffard, (Thu Mar 13, 3:07 pm)
Re: 2.6.25-rc5-mm1, Andrew Morton, (Thu Mar 13, 3:35 pm)
Re: 2.6.25-rc5-mm1, Badari Pulavarty, (Thu Mar 13, 4:10 pm)
Re: [2.6.25-rc5-mm1] WARNING: at drivers/base/sys.c:173, Tilman Schmidt, (Thu Mar 13, 5:01 pm)
Re: 2.6.25-rc5-mm1: "consolechars" hangs on boot, Oleg Nesterov, (Thu Mar 13, 10:26 pm)
Re: [2.6.25-rc5-mm1] WARNING: at drivers/base/sys.c:173, Tilman Schmidt, (Fri Mar 14, 2:58 am)
Re: 2.6.25-rc5-mm1: "consolechars" hangs on boot, Laurent Riffard, (Fri Mar 14, 2:06 pm)
Re: [2.6.25-rc5-mm1] WARNING: at drivers/base/sys.c:173, Tilman Schmidt, (Sat Mar 15, 5:16 am)
Re: 2.6.25-rc5-mm1 build failure of pcsp.c, Mariusz Kozlowski, (Sun Mar 16, 2:38 pm)
Re: [2.6.25-rc5-mm1] regression: cannot run Postfix sendma ..., Tilman Schmidt, (Mon Mar 17, 6:35 am)
Re: [2.6.25-rc5-mm1] regression: cannot run Postfix sendma ..., Rafael J. Wysocki, (Thu Mar 20, 3:21 am)
Re: [2.6.25-rc5-mm1] regression: cannot run Postfix sendma ..., Rafael J. Wysocki, (Thu Mar 20, 7:38 am)
Re: 2.6.25-rc5-mm1, Ingo Molnar, (Fri Mar 21, 5:12 am)
Re: 2.6.25-rc5-mm1 shutdown crash, Helge Hafting, (Tue Mar 25, 5:23 am)
Re: 2.6.25-rc5-mm1 sparc64 boot problems due to generic pc ..., Mariusz Kozlowski, (Fri Mar 28, 3:52 pm)
Re: 2.6.25-rc5-mm1 sparc64 boot problems due to generic pc ..., Benjamin Herrenschmidt, (Fri Mar 28, 5:44 pm)