[prev in list] [next in list] [prev in thread] [next in thread] 

List:       klik-devel
Subject:    Re: [klik-devel] klik-devel Digest, Vol 22, Issue 14
From:       "Fabian Franz" <FabianFranz () gmx ! de>
Date:       2007-11-24 13:24:07
Message-ID: 20071124132407.167560 () gmx ! net
[Download RAW message or body]

> gksu still fails

For sure.

Klik uses LD_PRELOAD, which due to security reasons is reset if using a suid root program.

Only solution: Parse the .desktop file and change the gksu execution to outside the session.

i.e. gksu -u root 'chroot', '/tmp/klik/XYjK2_.execute.wireshark_0.99.6rel-3.cmg

cu

Fabian
> 
> On Nov 23, 2007 12:00 AM,  <klik-devel-request@kde.org> wrote:
> > Send klik-devel mailing list submissions to
> >         klik-devel@kde.org
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >         https://mail.kde.org/mailman/listinfo/klik-devel
> > or, via email, send a message with subject or body 'help' to
> >         klik-devel-request@kde.org
> >
> > You can reach the person managing the list at
> >         klik-devel-owner@kde.org
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of klik-devel digest..."
> >
> >
> > Today's Topics:
> >
> >    1. Wireshark (Jason Taylor)
> >    2. Re: Wireshark (RazZziel)
> >
> >
> > ----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Thu, 22 Nov 2007 20:14:55 +1300
> > From: "Jason Taylor" <killerkiwi2005@gmail.com>
> > Subject: [klik-devel] Wireshark
> > To: "Lionel Tricon" <lionel.tricon@free.fr>, probono
> >         <probono@myrealbox.com>,        klik-devel@kde.org
> > Message-ID:
> >         <94dd8f6f0711212314j552615eeyd3cadccf1ae1601d@mail.gmail.com>
> > Content-Type: text/plain; charset=ISO-8859-1
> >
> > I've been playing with wireshark it has 2 desktop files so I get a
> > multi application choice
> >
> > If I choose wireshark as root the following command gets run
> > ['chroot', '/tmp/klik/XYjK2_.execute.wireshark_0.99.6rel-3.cmg',
> > 'gksu', '-u', 'root', '/usr/bin/wireshark']
> >
> > which returns
> > must be setuid root
> > (0, '')
> >
> >
> > Is there some reason gksu would not run in the chroot?
> >
> > Ive tested this in a shell and you cant even "gksu ls"
> >
> > Jason
> >
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Thu, 22 Nov 2007 09:53:13 +0200
> > From: RazZziel <razielmine@gmail.com>
> > Subject: Re: [klik-devel] Wireshark
> > To: klik-devel@kde.org
> > Message-ID:
> >         <82e274890711212353obc54a07udaa7e432603c8747@mail.gmail.com>
> > Content-Type: text/plain; charset=UTF-8
> >
> > In my system, "klik wireshark.cmg" returns:
> >
> > Starting Application...
> > chroot: cannot run command `gksu -u root /usr/bin/wireshark': No such
> > file or directory
> > Version: 20070708
> > Usage: fuseiso [-n] [-p] [-c <iocharset>] [-h] <isofs_image_file>
> > <mount_point> [<FUSE library options>]
> > Where options are:
> > [etc]
> >
> > And then the terminal hangs and I can't even Ctrl+C or Ctrl+D. ps xaf
> sais:
> >
> >  9161 pts/0    Sl+    0:12  |   \_ python /usr/local/bin/klik wireshark
> >  9175 pts/0    Z+     0:00  |       \_ [gpg] <defunct>
> >
> > And in "klik shell wireshark.cmg",  gksu ls sais that "su" returned
> > "Invalid password". If I try to su, I always get an "incorrect
> > password" message, and if I try to sudo something: "bash:
> > /usr/bin/sudo: No such file or directory", while both su, sudo and
> > gksu work flawlessy outside the chroot.
> >
> > On Nov 22, 2007 9:14 AM, Jason Taylor <killerkiwi2005@gmail.com> wrote:
> > > I've been playing with wireshark it has 2 desktop files so I get a
> > > multi application choice
> > >
> > > If I choose wireshark as root the following command gets run
> > > ['chroot', '/tmp/klik/XYjK2_.execute.wireshark_0.99.6rel-3.cmg',
> > > 'gksu', '-u', 'root', '/usr/bin/wireshark']
> > >
> > > which returns
> > > must be setuid root
> > > (0, '')
> > >
> > >
> > > Is there some reason gksu would not run in the chroot?
> > >
> > > Ive tested this in a shell and you cant even "gksu ls"
> > >
> > > Jason
> > > _______________________________________________
> > > klik-devel mailing list
> > > klik-devel@kde.org
> > > https://mail.kde.org/mailman/listinfo/klik-devel
> > >
> >
> >
> >
> > --
> > ...yet even then, we ran like the wind, whilst our laughter echoed,
> > under cerulean skies...
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > klik-devel mailing list
> > klik-devel@kde.org
> > https://mail.kde.org/mailman/listinfo/klik-devel
> >
> >
> > End of klik-devel Digest, Vol 22, Issue 14
> > ******************************************
> >
> _______________________________________________
> klik-devel mailing list
> klik-devel@kde.org
> https://mail.kde.org/mailman/listinfo/klik-devel
_______________________________________________
klik-devel mailing list
klik-devel@kde.org
https://mail.kde.org/mailman/listinfo/klik-devel
[prev in list] [next in list] [prev in thread] [next in thread]