is "groupmems" not being setgid worth a bugzilla report?

g geleem at bellsouth.net
Sun Feb 9 14:11:22 UTC 2014


hi p.j.,

On 02/09/2014 03:27 AM, Robert P. J. Day wrote:
> On Sun, 9 Feb 2014, Ed Greshko wrote:
>
>> On 02/09/14 17:07, Robert P. J. Day wrote:
>>>    on my f20 system, perusing the account-related commands and ran
>>> across the "groupmems" command, whose man page reads:
>>>
>>> "SETUP
>>>         The groupmems executable should be in mode 2770 as user root and in group groups. The system administrator can
>>>         add users to group groups to allow or disallow them using the groupmems utility to manage their own group
>>>         membership list.
>>>
>>>                  $ groupadd -r groups
>>>                  $ chmod 2770 groupmems
>>>                  $ chown root.groups groupmems
>>>                  $ groupmems -g groups -a gk4"
>>>
>>>    currently, /usr/sbin/groupmems has the following properties:
>>>
>>> # ls -l /usr/sbin/groupmems
>>> -rwxr-x---. 1 root root 56960 Jul 26  2013 /usr/sbin/groupmems
>>> #
>>>
>>>    so how should i interpret the man page? should groupmems be setgid?
>>> or is the man page suggesting how the reader might set it to setgid
>>> for further customization? the way the man page is worded seems
>>> ambiguous.
>>
>> You should interpret the man page to say....  *If* you want to give
>> users the ability to administer their own group membership list then
>> follow the instructions in the "SETUP" section.
>>
>> By default, this feature is not enable, thus it is not released with
>> mode 2770 set.
>
>    i thought as much, which means that the man page is still
> confusingly worded and, IMHO, still merits a BZ report.
>
> pedantically yours,
> rday

if you want to be "technickly" correct, something else to consider
for your bz report:

   ]$ man groupmems
   ]$
   ]$ ls -l /usr/sbin/groupmems
   -rwxr-x---. 1 root root 49356 Dec  9  2011 /usr/sbin/groupmems*
   ]$
   ]$
   ]$ groupadd -r groups
   bash: /usr/sbin/groupadd: Permission denied
   ]$ su
   Password:
   ]#
   ]# groupadd -r groups
   ]# chmod 2770 groupmems
   chmod: cannot access `groupmems': No such file or directory
   ]# chmod 2770 /usr/sbin/groupmems
   ]# chown root:groups groupmems
   chown: cannot access `groupmems': No such file or directory
   ]# chown root:groups /usr/sbin/groupmems
   ]# groupmems -g groups -a gk4"
   > ^C
   ]#
   ]# ls -l /usr/sbin/groupmems
   -rwxrwx---. 1 root groups 49356 Dec  9  2011 /usr/sbin/groupmems
   ]#

note closely the 1st 9 lines and the last 7 lines.

so, _technickly_ the man page "groupmems" is *incorrect*. ;-)

-- 

peace out.

in a world with out fences, who needs gates.

tc.hago.

g
.



More information about the users mailing list