Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 353205 - app-emulation/virtualbox-bin-4.0.2 write permission
Summary: app-emulation/virtualbox-bin-4.0.2 write permission
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Patrick Lauer
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-01-30 08:18 UTC by Talamona Francesco
Modified: 2012-12-22 15:17 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge_info.txt,23.70 KB, text/plain)
2011-01-30 14:38 UTC, Talamona Francesco
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Talamona Francesco 2011-01-30 08:18:13 UTC
This is the error message:

Failed to open a session for the virtual machine ProvaISO.
Failed to load VMMR0.r0 (VERR_SUPLIB_WRITE_NON_SYS_GROUP).
Unknown error creating VM (VERR_SUPLIB_WRITE_NON_SYS_GROUP).

There is very little information about this message online, the only thing I could find was:

http://www.virtualbox.org/svn/vbox/trunk/include/VBox/err.h

where there is a description:
/** The group is a non-system group and it has write access (hardening). */
#define VERR_SUPLIB_WRITE_NON_SYS_GROUP             (-3766)

Still I don't know what to do in order to fix this.
Comment 1 Talamona Francesco 2011-01-30 14:38:31 UTC
Created attachment 261101 [details]
emerge --info

Two notes:
* It happens with app-emulation/virtualbox-bin-4.0.0-r1 too
* The user running VirtualBox belongs to vboxusers vboxadd vboxguest groups
Comment 2 Ivan Mykhailov 2011-02-01 14:55:42 UTC
I have similar problem and I found the cause. /opt folder have permission g+w and group that include only one my current user. 

When i remove write group permission from /opt folder i could start virtual machine corretly.

I think in other cases it can be othen folder then /opt, because vbox user followong code to check all resources:

 if (   (pFsObjState->Stat.st_mode & S_IWGRP)
        && pFsObjState->Stat.st_gid != 0)
    {

Comment 3 Jeroen Roovers (RETIRED) gentoo-dev 2011-02-01 17:19:49 UTC
(In reply to comment #2)
> I have similar problem and I found the cause. /opt folder have permission g+w
> and group that include only one my current user. 
> 
> When i remove write group permission from /opt folder i could start virtual
> machine corretly.

Why would /opt have g+w in the first place?
Comment 4 Talamona Francesco 2011-02-05 20:13:24 UTC
That's it, thanks Ivan.

My /opt folder was +g for games group
Comment 5 Alexandre Hamelin 2011-04-11 12:48:35 UTC
Fix also works for me: chmod g-w /opt

Why would VirtualBox *require* this kind of hardening though is beyond me.
Comment 6 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2012-12-22 15:17:24 UTC
Wrong permissions of /opt is nothing we can take care of.