GNU logs - #22511, boring messages

Message sent to bug-coreutils@HIDDEN:

Subject: bug#22511: [request] Add "--preserve-setuid" to the chown command
Resent-From: William Di Luigi <williamdiluigi@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 01 Feb 2016 03:17:02 +0000
Resent-Message-ID: <handler.22511.B.145429660830863 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 22511 <at> debbugs.gnu.org
MIME-Version: 1.0
From: William Di Luigi <williamdiluigi@HIDDEN>
Date: Mon, 1 Feb 2016 03:33:29 +0100
Message-ID: <CAJNpUg5QnAEu9wieVSJGTKT58B684O9b=7sa6Avdhsr75erNEg@HIDDEN>
Content-Type: text/plain; charset=UTF-8
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi,
if I understand it correctly, chown clears the setuid bit for security
reasons (since, when changing the owner or group for a file, you could
potentially be allowing *new people* to run that file as root).

While this is good for security, sometimes you want to be able to
preserve the setuid bit. For example, when packaging software
(https://bbs.archlinux.org/viewtopic.php?pid=1600551)

What do you think about adding a "--preserve-setuid" optional flag?

Regards,
William

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: William Di Luigi <williamdiluigi@HIDDEN>
Subject: bug#22511: Acknowledgement ([request] Add "--preserve-setuid" to
 the chown command)
Message-ID: <handler.22511.B.145429660830863.ack <at> debbugs.gnu.org>
References: <CAJNpUg5QnAEu9wieVSJGTKT58B684O9b=7sa6Avdhsr75erNEg@HIDDEN>
X-Gnu-PR-Message: ack 22511
X-Gnu-PR-Package: coreutils
Reply-To: 22511 <at> debbugs.gnu.org
Date: Mon, 01 Feb 2016 03:17:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-coreutils@HIDDEN

If you wish to submit further information on this problem, please
send it to 22511 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
22511: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D22511
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-coreutils@HIDDEN:

Subject: bug#22511: [request] Add "--preserve-setuid" to the chown command
Resent-From: Erik Auerswald <auerswal@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 01 Feb 2016 08:21:02 +0000
Resent-Message-ID: <handler.22511.B22511.145431483626124 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: William Di Luigi <williamdiluigi@HIDDEN>
Cc: 22511 <at> debbugs.gnu.org
Date: Mon, 1 Feb 2016 09:20:30 +0100
From: Erik Auerswald <auerswal@HIDDEN>
Message-ID: <20160201082030.GA15972@HIDDEN>
References: <CAJNpUg5QnAEu9wieVSJGTKT58B684O9b=7sa6Avdhsr75erNEg@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAJNpUg5QnAEu9wieVSJGTKT58B684O9b=7sa6Avdhsr75erNEg@HIDDEN>
User-Agent: Mutt/1.5.21 (2010-09-15)
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi,

On Mon, Feb 01, 2016 at 03:33:29AM +0100, William Di Luigi wrote:
> if I understand it correctly, chown clears the setuid bit for security
> reasons (since, when changing the owner or group for a file, you could
> potentially be allowing *new people* to run that file as root).
> 
> While this is good for security, sometimes you want to be able to
> preserve the setuid bit. For example, when packaging software
> (https://bbs.archlinux.org/viewtopic.php?pid=1600551)

How about using "install" to install files, setting owner and mode bits
in one go?

HTH,
Erik
-- 
Always use the right tool for the job.
                        -- Rob Pike

Message sent to bug-coreutils@HIDDEN:

Subject: bug#22511: [request] Add "--preserve-setuid" to the chown command
Resent-From: William Di Luigi <williamdiluigi@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 01 Feb 2016 09:34:01 +0000
Resent-Message-ID: <handler.22511.B22511.14543191912289 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Erik Auerswald <auerswal@HIDDEN>
Cc: 22511 <at> debbugs.gnu.org
MIME-Version: 1.0
In-Reply-To: <20160201082030.GA15972@HIDDEN>
References: <CAJNpUg5QnAEu9wieVSJGTKT58B684O9b=7sa6Avdhsr75erNEg@HIDDEN>
 <20160201082030.GA15972@HIDDEN>
From: William Di Luigi <williamdiluigi@HIDDEN>
Date: Mon, 1 Feb 2016 10:32:43 +0100
Message-ID: <CAJNpUg5xin9fCsj9dbBX3Ssj34NHocy6sORfkV8hJMKfNsw5bw@HIDDEN>
Content-Type: text/plain; charset=UTF-8
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On Mon, Feb 1, 2016 at 9:20 AM, Erik Auerswald
<auerswal@HIDDEN> wrote:
> How about using "install" to install files, setting owner and mode bits
> in one go?

Mmm I guess it's just that, since I'm packaging an already existing
software, I'd like to patch it as little as possible. In fact, the
Makefile for this software already sets the setuid bit on the file
that needs it. I only need to change the group of that file (and thus
I need to run the chown command on it). However, since chown removes
the setuid bit, I have to "add it back" in the packaging script.

It doesn't make much of a difference, since I can just do chown and
chmod (as I currently do). However, if the proposed flag is
implemented, I can avoid "adding back" the setuid bit and thus I can
simplify the packaging script (well, not by much, I would remove just
2 lines: the chmod line and the bash comment explaining why the chmod
is there).

--
William

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 25 Oct 2018 15:29:08 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Oct 25 11:29:08 2018
Received: from localhost ([127.0.0.1]:42598 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gFhZL-0007t9-RV
	for submit <at> debbugs.gnu.org; Thu, 25 Oct 2018 11:29:08 -0400
Received: from mail-it1-f182.google.com ([209.85.166.182]:40639)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <assafgordon@HIDDEN>) id 1gFhZK-0007sn-Qi
 for control <at> debbugs.gnu.org; Thu, 25 Oct 2018 11:29:07 -0400
Received: by mail-it1-f182.google.com with SMTP id i191-v6so2264079iti.5
 for <control <at> debbugs.gnu.org>; Thu, 25 Oct 2018 08:29:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=date:from:to:message-id:mime-version:content-disposition:user-agent;
 bh=ngcnFhGwHKbXnAWTWpzFfg51CNNIYEs8c4en39H+SZU=;
 b=kAREeI/bab5o6Lill1YXa+cVDNtbIuv62LHSxjKD23sQ7z2j8uSZ/giF1ObJSyybWb
 KAU0aX9yNbnM5E5/adS/sUnYyHGsnWfBjmsQ+Qo2t2S3NCJ+skqyf6VbVayFGqUblXCZ
 DDzh5yw5iDYtfroB6UAWssgkD9FlOS3OZ0pC/BA/birGxwy1RTPuny2eXJXFW1bBRSmU
 WGpCaEULmsKWuWAATosFCtafKjl7fdZL7pwqQsUFPqU6tzcQeX2dUnyvlMVRvzVIGXNs
 WXKncA63Jw+Md4O0hbHYbA1QFi6F+eG+5oOUqf6lhvtoe0PLVs9jtvUBDufYV78ORYwT
 RW0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:date:from:to:message-id:mime-version
 :content-disposition:user-agent;
 bh=ngcnFhGwHKbXnAWTWpzFfg51CNNIYEs8c4en39H+SZU=;
 b=cqu+/ap4Ijx0X+lXaQri335R4/yLuhJyHJCN/FLVlUFFLTsaBwfunyVaSwBOzAeMUo
 gDNEVMWuTHqSLrzpnBs8qNrRC+uXloKrMB8/9QqfSa+EhX3XIqEz9JKQx0bAfXPYsShR
 RgV/37CuYnt6YYdeQOGW0+BZZwJkyi9Gp2wn6gM/74azCeWtb2bN9/WEXnc9vKyrgj/r
 hA7SmbsDHVQ6FgHER0HemkCDARY/kV0Dw6hhpT59v4t4+LwLFV8AqB/V2LY56GwQAPJQ
 DkLpCMZRkiyAemfqSt48SZZFv2MPbqdmg6nPS8YLhra2cFa6f4FsJsvw8gyK4Eai6rPi
 u3ew==
X-Gm-Message-State: AGRZ1gIZoDQ3dzZc5MyaoUelkw/6hB5NaNAAI7VZTKB5foFS8AylH6vv
 EOpji7H2ojZ/l48KrRaTEqKT7OFI
X-Google-Smtp-Source: AJdET5dakFVdHIIO1ZhjUKP/pXwVmX6rGygArh2maCoiYX2o8XwoVQc39JWn/i3/8vnK7FY6BGgMJQ==
X-Received: by 2002:a24:f9c5:: with SMTP id
 l188-v6mr1348647ith.71.1540481340910; 
 Thu, 25 Oct 2018 08:29:00 -0700 (PDT)
Received: from tomato.housegordon.com (moose.housegordon.com. [184.68.105.38])
 by smtp.gmail.com with ESMTPSA id
 t190-v6sm813374ita.39.2018.10.25.08.28.58
 for <control <at> debbugs.gnu.org>
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Thu, 25 Oct 2018 08:28:59 -0700 (PDT)
Date: Thu, 25 Oct 2018 09:28:56 -0600
From: Assaf Gordon <assafgordon@HIDDEN>
To: control <at> debbugs.gnu.org
Message-ID: <20181025152856.fsnfh5m2hs3iqdqp@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: NeoMutt/20170113 (1.7.2)
X-Spam-Score: 2.0 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: severity 22511 wishlist retitle 22511 chown: add
 "--preserve-setuid" option [...] 
 Content analysis details:   (2.0 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
 (assafgordon[at]gmail.com)
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
 trust [209.85.166.182 listed in list.dnswl.org]
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.2 NO_SUBJECT             Extra score for no subject
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 1.0 (+)

severity 22511 wishlist
retitle 22511 chown: add "--preserve-setuid" option

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 25 Oct 2018 15:29:08 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Oct 25 11:29:08 2018
Received: from localhost ([127.0.0.1]:42598 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1gFhZL-0007t9-RV
	for submit <at> debbugs.gnu.org; Thu, 25 Oct 2018 11:29:08 -0400
Received: from mail-it1-f182.google.com ([209.85.166.182]:40639)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <assafgordon@HIDDEN>) id 1gFhZK-0007sn-Qi
 for control <at> debbugs.gnu.org; Thu, 25 Oct 2018 11:29:07 -0400
Received: by mail-it1-f182.google.com with SMTP id i191-v6so2264079iti.5
 for <control <at> debbugs.gnu.org>; Thu, 25 Oct 2018 08:29:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=date:from:to:message-id:mime-version:content-disposition:user-agent;
 bh=ngcnFhGwHKbXnAWTWpzFfg51CNNIYEs8c4en39H+SZU=;
 b=kAREeI/bab5o6Lill1YXa+cVDNtbIuv62LHSxjKD23sQ7z2j8uSZ/giF1ObJSyybWb
 KAU0aX9yNbnM5E5/adS/sUnYyHGsnWfBjmsQ+Qo2t2S3NCJ+skqyf6VbVayFGqUblXCZ
 DDzh5yw5iDYtfroB6UAWssgkD9FlOS3OZ0pC/BA/birGxwy1RTPuny2eXJXFW1bBRSmU
 WGpCaEULmsKWuWAATosFCtafKjl7fdZL7pwqQsUFPqU6tzcQeX2dUnyvlMVRvzVIGXNs
 WXKncA63Jw+Md4O0hbHYbA1QFi6F+eG+5oOUqf6lhvtoe0PLVs9jtvUBDufYV78ORYwT
 RW0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:date:from:to:message-id:mime-version
 :content-disposition:user-agent;
 bh=ngcnFhGwHKbXnAWTWpzFfg51CNNIYEs8c4en39H+SZU=;
 b=cqu+/ap4Ijx0X+lXaQri335R4/yLuhJyHJCN/FLVlUFFLTsaBwfunyVaSwBOzAeMUo
 gDNEVMWuTHqSLrzpnBs8qNrRC+uXloKrMB8/9QqfSa+EhX3XIqEz9JKQx0bAfXPYsShR
 RgV/37CuYnt6YYdeQOGW0+BZZwJkyi9Gp2wn6gM/74azCeWtb2bN9/WEXnc9vKyrgj/r
 hA7SmbsDHVQ6FgHER0HemkCDARY/kV0Dw6hhpT59v4t4+LwLFV8AqB/V2LY56GwQAPJQ
 DkLpCMZRkiyAemfqSt48SZZFv2MPbqdmg6nPS8YLhra2cFa6f4FsJsvw8gyK4Eai6rPi
 u3ew==
X-Gm-Message-State: AGRZ1gIZoDQ3dzZc5MyaoUelkw/6hB5NaNAAI7VZTKB5foFS8AylH6vv
 EOpji7H2ojZ/l48KrRaTEqKT7OFI
X-Google-Smtp-Source: AJdET5dakFVdHIIO1ZhjUKP/pXwVmX6rGygArh2maCoiYX2o8XwoVQc39JWn/i3/8vnK7FY6BGgMJQ==
X-Received: by 2002:a24:f9c5:: with SMTP id
 l188-v6mr1348647ith.71.1540481340910; 
 Thu, 25 Oct 2018 08:29:00 -0700 (PDT)
Received: from tomato.housegordon.com (moose.housegordon.com. [184.68.105.38])
 by smtp.gmail.com with ESMTPSA id
 t190-v6sm813374ita.39.2018.10.25.08.28.58
 for <control <at> debbugs.gnu.org>
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Thu, 25 Oct 2018 08:28:59 -0700 (PDT)
Date: Thu, 25 Oct 2018 09:28:56 -0600
From: Assaf Gordon <assafgordon@HIDDEN>
To: control <at> debbugs.gnu.org
Message-ID: <20181025152856.fsnfh5m2hs3iqdqp@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: NeoMutt/20170113 (1.7.2)
X-Spam-Score: 2.0 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: severity 22511 wishlist retitle 22511 chown: add
 "--preserve-setuid" option [...] 
 Content analysis details:   (2.0 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
 (assafgordon[at]gmail.com)
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
 trust [209.85.166.182 listed in list.dnswl.org]
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.2 NO_SUBJECT             Extra score for no subject
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 1.0 (+)

severity 22511 wishlist
retitle 22511 chown: add "--preserve-setuid" option

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.