Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 10265 - dosemu install with a buggy /usr/bin/dosemu script
Summary: dosemu install with a buggy /usr/bin/dosemu script
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High trivial (vote)
Assignee: Ryan Phillips (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-11-05 07:10 UTC by Whit Blauvelt
Modified: 2003-04-04 01:24 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Whit Blauvelt 2002-11-05 07:10:22 UTC
An attempt to start dosemu while root gives the message:

  Your are logged in as user root. The local configuration within
  this DOSEMU installation is world writeable and may compromise your system.
  Either use a normal unprivileged user installation or protect the following
  directories/files against everybody except root:
      /root/conf
      /root/conf/global.conf
      /root/conf/dosemu.conf
      /root/conf/dosemurc   

But changing the perms to 700 on /root/conf and its contents then rerunning
dosemu still presents that message, because dosemu itself is running as root,
and the test it uses for "world writeable" is whether _it_ has permission to
write to those files. It tries to su to "nobody" for this, but that fails
because "nobody" has a /bin/false shell on Gentoo. Commenting out that whole
section in dosemu's script of course fixes the problem (after the permissions
change - why didn't it just set the permissions right, it created the
directory?). I'm sure this is basically a problem from the dosemu people, who
expect "nobody" to have a valid shell ... real security experts ;).
Comment 1 Ryan Phillips (RETIRED) gentoo-dev 2002-11-06 18:05:23 UTC
I am inclined to think that this is an upstream issue...  This was how the program was coded.  Does it run as non-root?  -r 
Comment 2 Ryan Phillips (RETIRED) gentoo-dev 2003-01-31 16:25:11 UTC
moving to 'later'
Comment 3 John Davis (zhen) (RETIRED) gentoo-dev 2003-04-04 01:19:28 UTC
db fix
Comment 4 John Davis (zhen) (RETIRED) gentoo-dev 2003-04-04 01:24:30 UTC
db fix