On Wed, Jul 02, 2014 at 10:29:35PM +0200, Hans wrote:
> strace -f dpkg --print-architecture
> execve("/usr/bin/dpkg", ["dpkg", "--print-architecture"], [/* 46 vars */]) = 
> -1 EACCES (Permission denied)

Ouch. This means that user cannot execute dpkg itself.

> ls -la /usr/bin/dpkg
> -rwxr-x--- 1 root root 265840 Jun  5 21:26 /usr/bin/dpkg

And this proves it. This is definitely wrong, anyone should be able to
execute dpkg.

BTW, to check 'stock' file permissions that should be set on a package
install, one can use dpkg-deb. In this case:

$ aptitude download dpkg
Get: 1 http://security.debian.org/ wheezy/updates/main dpkg i386 1.16.15 [2,637 
kB]
Fetched 2,637 kB in 2s (932 kB/s)

$ dpkg-deb -c dpkg_1.16.15_i386.deb | grep dpkg$
-rwxr-xr-x root/root    260208 2014-06-06 02:17 ./usr/bin/dpkg
-rw-r--r-- root/root       445 2014-06-06 00:01 
./usr/share/lintian/overrides/dpkg
-rw-r--r-- root/root       232 2014-06-06 02:17 ./etc/logrotate.d/dpkg
-rwxr-xr-x root/root       256 2014-06-06 02:17 ./etc/cron.daily/dpkg

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140703060122.GA6655@x101h

Reply via email to