GNU bug report logs - #40550
Shell skeletons not working as expected

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Package: guix; Reported by: Alexandru-Sergiu Marton <brown121407@HIDDEN>; dated Sat, 11 Apr 2020 10:21:01 UTC; Maintainer for guix is bug-guix@HIDDEN.
Changed bug title to 'Shell skeletons not working as expected' from '"Shell skeletons not working as expected"' Request was from Leo Famulari <leo@HIDDEN> to control <at> debbugs.gnu.org. Full text available.
Changed bug title to '"Shell skeletons not working as expected"' from 'zsh: sudo is not setuid' Request was from Leo Famulari <leo@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 40550 <at> debbugs.gnu.org:


Received: (at 40550) by debbugs.gnu.org; 13 Apr 2020 17:56:07 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 13 13:56:07 2020
Received: from localhost ([127.0.0.1]:60710 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jO3JX-0007Qq-44
	for submit <at> debbugs.gnu.org; Mon, 13 Apr 2020 13:56:07 -0400
Received: from out5-smtp.messagingengine.com ([66.111.4.29]:57027)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@HIDDEN>) id 1jO3JV-0007QL-4S
 for 40550 <at> debbugs.gnu.org; Mon, 13 Apr 2020 13:56:05 -0400
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42])
 by mailout.nyi.internal (Postfix) with ESMTP id E28845C011C;
 Mon, 13 Apr 2020 13:55:59 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163])
 by compute2.internal (MEProxy); Mon, 13 Apr 2020 13:55:59 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:cc:subject:message-id:references:mime-version
 :content-type:in-reply-to; s=mesmtp; bh=/mOs97BxQMA2Ut+iDsUIP4Y3
 jMMF3jNmLeKqIaCFNEs=; b=q0kNX/Us9WskblszRynCk27SBP+YMD0ZbrpnKo6K
 tGNR/wTxHBAeaamz2ksgKTkF+8Bv55ybnOkHQ9UmYiJQgUHIDj0W0QX0QBz3j76C
 saCTFshqY8YxV+eDTTlFhkjIsputOl9ZDTaAbIehUbpVGaO0KaBjrgxiLeQUkk6p
 feE=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:content-type:date:from:in-reply-to
 :message-id:mime-version:references:subject:to:x-me-proxy
 :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=/mOs97
 BxQMA2Ut+iDsUIP4Y3jMMF3jNmLeKqIaCFNEs=; b=b9zWauZsBLIH3Or0IAzAlC
 QvPjh8ObByJzCMoinFZKld7Ob61Kx0uQTppywosHs2CaFdPrlUMEwksCpmsowlzN
 OOQZNEZgQWDqi/vNy/ZHNboofINzSOvYaeAXAh/otm3Jxit0GguEZQ4cGnieCJyS
 I51VyEgmQiFrIu0/rKVqtq2L2BpQxOCM5ctI6CqkPBehW+RItQsGqV4gtGf0HoOW
 VHnNFBAlY2B5j4C9r0MsQQnFL6Pw31CGyKOUamWV8Kc9T9qIvAS+IzQHv8i75YYI
 pTaVJhPl4+HiigutVeqe5OU1Sonk1vgqTm4WHjhspExPSziv5IMCW4nVjnT4uSjQ
 ==
X-ME-Sender: <xms:rqeUXoONOoEUpelG5nciE39Y5ZFjbItp5xFHbsrLcJlO9dIpvLrysg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduhedrvdelgdduvddtucetufdoteggodetrfdotf
 fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
 uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
 cujfgurhepfffhvffukfhfgggtuggjsehttdertddttddvnecuhfhrohhmpefnvghoucfh
 rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucffohhmrghinh
 epsghrohifnhdrlhhotggrlhenucfkphepjeeirdduvdegrddufeekrdeifeenucevlhhu
 shhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuh
 hlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:rqeUXgzefrWowxszhFJr1lnM1NkVXEY-DD27_DKN5cPJXmInwriABA>
 <xmx:rqeUXhB9-Pu5N-OsNmvGaJwb_ATPWHqtFOZ2G3YtHGLc_FNfA9poxw>
 <xmx:rqeUXh5qC3y_Iv4bMOdN_S2dXJjgw79MQMK7LeT-n2tQGnVY9xdTZg>
 <xmx:r6eUXrSngyBA5fG-zkT_CiKFkPANxsJFHLak9zDSoWBI8iG5qVoSCA>
Received: from localhost (c-76-124-138-63.hsd1.pa.comcast.net [76.124.138.63])
 by mail.messagingengine.com (Postfix) with ESMTPA id 61BD63060064;
 Mon, 13 Apr 2020 13:55:58 -0400 (EDT)
Date: Mon, 13 Apr 2020 13:55:55 -0400
From: Leo Famulari <leo@HIDDEN>
To: Alexandru-Sergiu Marton <brown121407@HIDDEN>
Subject: Re: bug#40550: zsh: sudo is not setuid
Message-ID: <20200413175555.GB23262@HIDDEN>
References: <C1YAP1W11L61.2VVVOWHR0N902@121408>
 <C1ZT2LM0ATS0.3LWS5KNCFSPWV@121408>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <C1ZT2LM0ATS0.3LWS5KNCFSPWV@121408>
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 40550
Cc: Alexandru-Sergiu Marton <brown121407@HIDDEN>,
 Efraim Flashner <efraim@HIDDEN>, 40550 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

On Mon, Apr 13, 2020 at 07:46:58AM +0300, Alexandru-Sergiu Marton wrote:
> On Sun Apr 12, 2020 at 1:38 AM PST, Efraim Flashner wrote:
> > Do you have sudo installed in a profile? /run/setuid-programs/sudo
> > should be the first 'sudo' in your PATH regardless of the shell. What's
> > the contents of your $PATH?
> 
> This is my $PATH in zsh:
> /home/brown/bin:/home/brown/.local/bin:/home/brown/.guix-profile/bin:/home/brown/.guix-profile/sbin:/run/current-system/profile/bin

Setting up Zsh should definitely work when creating a new user's home
directory, but maybe it doesn't do the right thing when changing a
user's shell after the home directory has already been created. We
should look into that.

Please copy the contents of '/etc/skel/.zprofile' to your zprofile file
and check for the /run/setuid-programs in your $PATH after logging in
again with `zsh --login`.
Information forwarded to bug-guix@HIDDEN:
bug#40550; Package guix. Full text available.

Message received at 40550 <at> debbugs.gnu.org:


Received: (at 40550) by debbugs.gnu.org; 13 Apr 2020 05:03:37 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 13 01:03:37 2020
Received: from localhost ([127.0.0.1]:59120 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jNrFx-0006HR-75
	for submit <at> debbugs.gnu.org; Mon, 13 Apr 2020 01:03:37 -0400
Received: from mout01.posteo.de ([185.67.36.65]:55745)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <brown121407@HIDDEN>) id 1jNrFv-0006HE-NT
 for 40550 <at> debbugs.gnu.org; Mon, 13 Apr 2020 01:03:36 -0400
Received: from submission (posteo.de [89.146.220.130]) 
 by mout01.posteo.de (Postfix) with ESMTPS id CDF6216005F
 for <40550 <at> debbugs.gnu.org>; Mon, 13 Apr 2020 07:03:29 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017;
 t=1586754209; bh=8apZY723rMIktI12iW5g/Jxc5uAdrcX/+0YMX5RMFYE=;
 h=Date:Cc:From:To:Subject:From;
 b=DxiNF94qURhaHtAxkBQL5aYjyDSdVhWUpz66AJvJl2/5f4yw7AV7qA5B+84m0sUB1
 a7T9POnITkwoMhtkel4EygOLF4D18UtQ664meraUkv4QeX5by8uUbYdCXO04Q9GBi0
 xoP2ayRX5j2FogEQefDHw7+VL9uU6rVU2bpyD5o2UmnNRHybyjS+mhBBLB4Ft6A9xz
 GKXCWubtqKSJ6QqVJ7VMiSq/gRR0fq/80pI9dhCw3/XBVDvyXXZDJ/CbvSI7irc3z+
 +9083RfUM8suwESfmSn1kaBPivGlP4SpI5vQZ+rCOXTAjERtof6BjYs6oQFvLTKXgS
 /J/wntI+Uu34g==
Received: from customer (localhost [127.0.0.1])
 by submission (posteo.de) with ESMTPSA id 490xN051qQz9rxS;
 Mon, 13 Apr 2020 07:03:28 +0200 (CEST)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Mon, 13 Apr 2020 08:01:09 +0300
In-Reply-To: <C1ZT2LM0ATS0.3LWS5KNCFSPWV@121408>
From: "Alexandru-Sergiu Marton" <brown121407@HIDDEN>
To: "Alexandru-Sergiu Marton" <brown121407@HIDDEN>, "Efraim Flashner"
 <efraim@HIDDEN>, "Alexandru-Sergiu Marton"
 <brown121407@HIDDEN>
Subject: Re: bug#40550: zsh: sudo is not setuid
Message-Id: <C1ZTDG94A66R.2JBWC49HEZ1NI@121408>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 40550
Cc: 40550 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

Just a few more details. If I boot into a system config with bash as the
default shell, this is my $PATH:

/home/brown/.guix-profile/bin:/home/brown/.guix-profile/sbin:/home/brown/bi=
n:/home/brown/.local/bin:/home/brown/.guix-profile/bin:/home/brown/.guix-pr=
ofile/sbin:/run/setuid-programs:/home/brown/.config/guix/current/bin:/home/=
brown/.guix-profile/bin:/home/brown/.guix-profile/sbin:/run/current-system/=
profile/bin:/run/current-system/profile/sbin

If I get zsh through an environment, my PATH still has
/run/setuid-programs in it.

[brown@121408 ~]$ guix environment --ad-hoc zsh
[brown@121408 ~][env]$ zsh
[brown@121408 ~]$ echo $PATH
/home/brown/.guix-profile/bin:/home/brown/.guix-profile/sbin:/gnu/store/anb=
9bk6qbwhblfr6fqcv6iiq8scyng1i-profile/bin:/home/brown/.guix-profile/bin:/ho=
me/brown/.guix-profile/sbin:/home/brown/bin:/home/brown/.local/bin:/home/br=
own/.guix-profile/bin:/home/brown/.guix-profile/sbin:/run/setuid-programs:/=
home/brown/.config/guix/current/bin:/home/brown/.guix-profile/bin:/home/bro=
wn/.guix-profile/sbin:/run/current-system/profile/bin:/run/current-system/p=
rofile/sbin
[brown@121408 ~]$ which -a sudo
/run/setuid-programs/sudo
/run/current-system/profile/bin/sudo

So my problem happens only when setting zsh as an account's default
shell.
Information forwarded to bug-guix@HIDDEN:
bug#40550; Package guix. Full text available.

Message received at 40550 <at> debbugs.gnu.org:


Received: (at 40550) by debbugs.gnu.org; 13 Apr 2020 04:54:31 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 13 00:54:31 2020
Received: from localhost ([127.0.0.1]:59109 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jNr78-00062H-Tl
	for submit <at> debbugs.gnu.org; Mon, 13 Apr 2020 00:54:31 -0400
Received: from mout01.posteo.de ([185.67.36.65]:37782)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <brown121407@HIDDEN>) id 1jNr76-000621-AP
 for 40550 <at> debbugs.gnu.org; Mon, 13 Apr 2020 00:54:29 -0400
Received: from submission (posteo.de [89.146.220.130]) 
 by mout01.posteo.de (Postfix) with ESMTPS id 1282B16005C
 for <40550 <at> debbugs.gnu.org>; Mon, 13 Apr 2020 06:54:21 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017;
 t=1586753662; bh=i+Ypr8EqP5IOBuMDypYTh0kixGrV4/fGUJgUtpvINwA=;
 h=Date:To:Subject:Cc:From:From;
 b=LhIYgYpbgSHRvQNF8n3CEmyv5zLpT8pqGlJTLfUFc0jrnyHE02Dnu35nhASB88bKU
 CGgshDotUkmZMx7mNyDGQDksHeaX9fk7+TVkIhdGoEpVRtru4WkSaB0sIByTQarHMB
 2H7wC8Z2WwNkdgEbCOKNA7KHf9rIW7cyHqR1dPR0WEPKn89blhcoXYGY8vdcVoDSx/
 2pCuyJTP99a3MtuDpZfmw015we2qZLrb1UCXXSRlE3eN+WutQS2Bspy9PfEBgVWyZ8
 c+xv7H/5Fzkz+jqQ3Za2uuA/JsOFblxBlQfVp9QOvw8mXW/LOzQVtrXeLydsN0YDM/
 dDlxXlofrezxA==
Received: from customer (localhost [127.0.0.1])
 by submission (posteo.de) with ESMTPSA id 490x9S6yVjz6tmF;
 Mon, 13 Apr 2020 06:54:20 +0200 (CEST)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Mon, 13 Apr 2020 07:46:58 +0300
To: "Efraim Flashner" <efraim@HIDDEN>, "Alexandru-Sergiu Marton"
 <brown121407@HIDDEN>
Subject: Re: bug#40550: zsh: sudo is not setuid
In-Reply-To: <20200411193821.GB2191@E5400>
From: "Alexandru-Sergiu Marton" <brown121407@HIDDEN>
Message-Id: <C1ZT2LM0ATS0.3LWS5KNCFSPWV@121408>
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 40550
Cc: 40550 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

On Sun Apr 12, 2020 at 1:38 AM PST, Efraim Flashner wrote:
> Do you have sudo installed in a profile? /run/setuid-programs/sudo
> should be the first 'sudo' in your PATH regardless of the shell. What's
> the contents of your $PATH?

This is my $PATH in zsh:
/home/brown/bin:/home/brown/.local/bin:/home/brown/.guix-profile/bin:/home/=
brown/.guix-profile/sbin:/run/current-system/profile/bin

> (ins)efraim@E5400 ~$ which -a sudo
> /run/setuid-programs/sudo
> /run/current-system/profile/bin/sudo

$ which -a sudo
/run/current-system/profile/bin/sudo

BUT!

$ ls /run/setuid-programs/
dbus-daemon-launch-helper  newuidmap  pkexec                 sudoedit
fusermount                 passwd     polkit-agent-helper-1  umount
mount                      ping       su
newgidmap                  ping6      sudo

So it looks like it's a problem with my PATH. While in bash I don't
append /run/setuid-programs to it manually, yet bash recognizes the
setuid programs. I'll probably add /run/setuid-programs by hand but I'm
wondering why doesn't it work by default.

Thanks,
Sergiu
Information forwarded to bug-guix@HIDDEN:
bug#40550; Package guix. Full text available.

Message received at 40550 <at> debbugs.gnu.org:


Received: (at 40550) by debbugs.gnu.org; 11 Apr 2020 19:39:01 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Apr 11 15:39:01 2020
Received: from localhost ([127.0.0.1]:57114 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jNLy1-0003d5-2O
	for submit <at> debbugs.gnu.org; Sat, 11 Apr 2020 15:39:01 -0400
Received: from flashner.co.il ([178.62.234.194]:46154)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <efraim@HIDDEN>) id 1jNLxz-0003ct-DB
 for 40550 <at> debbugs.gnu.org; Sat, 11 Apr 2020 15:38:59 -0400
Received: from localhost (unknown [141.226.9.17])
 by flashner.co.il (Postfix) with ESMTPSA id 8C5724034D;
 Sat, 11 Apr 2020 19:38:53 +0000 (UTC)
Date: Sat, 11 Apr 2020 22:38:21 +0300
From: Efraim Flashner <efraim@HIDDEN>
To: Alexandru-Sergiu Marton <brown121407@HIDDEN>
Subject: Re: bug#40550: zsh: sudo is not setuid
Message-ID: <20200411193821.GB2191@E5400>
References: <C1YAP1W11L61.2VVVOWHR0N902@121408>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="NKoe5XOeduwbEQHU"
Content-Disposition: inline
In-Reply-To: <C1YAP1W11L61.2VVVOWHR0N902@121408>
X-PGP-Key-ID: 0x41AAE7DCCA3D8351
X-PGP-Key: https://flashner.co.il/~efraim/efraim_flashner.asc
X-PGP-Fingerprint: A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 40550
Cc: 40550 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)


--NKoe5XOeduwbEQHU
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Apr 11, 2020 at 01:10:17PM +0300, Alexandru-Sergiu Marton wrote:
> Hi,
>=20
> I changed my default shell to zsh with the following line added to
> my user-account record in my config.scm:
>=20
> (shell #~(string-append #$zsh "/bin/zsh"))
>=20
> After reconfiguring the system and rebooting, when I try to run sudo or
> su (I guess this problem appears for every thing in %setuid-programs), I
> get a message saying it isn't actually a setuid program.
>=20
> I'm writing this from a reconfigured system started at the same point as
> the zsh one started, but with bash. Here I don't have that problem --
> setuid programs work as expected.
>=20
> Steps to reproduce:
> - $ guix pull
> - Change the default shell to zsh in your config.scm, as presented
>   above.
> - $ sudo guix system reconfigure config.scm
> - Reboot.
> - Try to run sudo or su. It should give you an error.

Do you have sudo installed in a profile? /run/setuid-programs/sudo
should be the first 'sudo' in your PATH regardless of the shell. What's
the contents of your $PATH?

(ins)efraim@E5400 ~$ which -a sudo
/run/setuid-programs/sudo
/run/current-system/profile/bin/sudo
(ins)efraim@E5400 ~$ guix environment --ad-hoc zsh
substitute: updating substitutes from 'http://192.168.1.183:3000'... 100.0%
substitute: updating substitutes from 'http://192.168.1.217:3000'... 100.0%
substitute: updating substitutes from 'https://ci.guix.gnu.org'... 100.0%
substitute: updating substitutes from 'https://bayfront.guix.gnu.org'... 10=
0.0%
The following derivation will be built:
   /gnu/store/yfqfk66vl1s6av45a92ml5l60d2kaxyk-profile.drv
2.1 MB will be downloaded:
   /gnu/store/icyx0ynnaaradzzxfqyjrwy0x545zdn5-zsh-5.8
The following profile hooks will be built:
   /gnu/store/8kim2ay78nrlgpdks734hridk21waxhc-fonts-dir.drv
   /gnu/store/fxdkr919viih72p9s2zkiadgj7r182d1-info-dir.drv
   /gnu/store/ml3s254v7zf4dmwmfpc59clr0xgllsbn-ca-certificate-bundle.drv
   /gnu/store/rvd1xybadpnzwlm1qz7iqcsky1dj2myw-manual-database.drv
downloading from https://ci.guix.gnu.org/nar/lzip/icyx0ynnaaradzzxfqyjrwy0x=
545zdn5-zsh-5.8...
 zsh-5.8  2.0MiB                                            1.6MiB/s 00:01 =
[##################] 100.0%

building CA certificate bundle...
building fonts directory...
building directory of Info manuals...
building database for manual pages...
building profile with 1 package...
(ins)efraim@E5400 ~ [env]$ zsh
E5400% which -a sudo
/run/setuid-programs/sudo
/run/current-system/profile/bin/sudo


--=20
Efraim Flashner   <efraim@HIDDEN>   =D7=90=D7=A4=D7=A8=D7=99=D7=9D =
=D7=A4=D7=9C=D7=A9=D7=A0=D7=A8
GPG key =3D A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

--NKoe5XOeduwbEQHU
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=2bTK
-----END PGP SIGNATURE-----

--NKoe5XOeduwbEQHU--
Information forwarded to bug-guix@HIDDEN:
bug#40550; Package guix. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 11 Apr 2020 10:20:20 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Apr 11 06:20:20 2020
Received: from localhost ([127.0.0.1]:56179 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jNDFM-00053W-6J
	for submit <at> debbugs.gnu.org; Sat, 11 Apr 2020 06:20:20 -0400
Received: from lists.gnu.org ([209.51.188.17]:50184)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <brown121407@HIDDEN>) id 1jNDFK-00053M-Id
 for submit <at> debbugs.gnu.org; Sat, 11 Apr 2020 06:20:19 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:43838)
 by lists.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <brown121407@HIDDEN>) id 1jNDFJ-0003Uw-7r
 for bug-guix@HIDDEN; Sat, 11 Apr 2020 06:20:18 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
 URIBL_BLOCKED autolearn=disabled version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <brown121407@HIDDEN>) id 1jNDFH-0005JL-VT
 for bug-guix@HIDDEN; Sat, 11 Apr 2020 06:20:16 -0400
Received: from mout02.posteo.de ([185.67.36.66]:33719)
 by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <brown121407@HIDDEN>)
 id 1jNDFH-0005Fd-Ft
 for bug-guix@HIDDEN; Sat, 11 Apr 2020 06:20:15 -0400
Received: from submission (posteo.de [89.146.220.130]) 
 by mout02.posteo.de (Postfix) with ESMTPS id BF8442400FC
 for <bug-guix@HIDDEN>; Sat, 11 Apr 2020 12:20:12 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017;
 t=1586600412; bh=TBWH+yZ3XYAvBmo87Ww3ADfsNQ/Ti2RtbG9BN9KjSoE=;
 h=Date:To:Subject:From:From;
 b=fF+lyqZ8xNnAcr54Nq+bsP+yIhtvyMory2UD5YEzKTtRsKp1SN363uO9+DCKhMSLt
 ztSNbaoEuLO9A4Y9uxsP+jbIRQAxQsCirzplEBAdeJsjlnbV4fHxvK0Yk8XPc5FXaT
 xl1Lyr1Faqh/q2UM8gO2YSmX8qsrPmRgWLrjttqlJLxHRmEOAUR2NWL3A/+SwACKCx
 BhpYAfUZJr6KxzFweGriGgOCez5kY+HN7q+ZqsS1036LgeqrrnsPhd29aAL1gAwVez
 7F1F3TPoqVlPLUnWDaL6lmV4Qdwnjbyt/kk8DpWbUeJpB+wdhQZoeOjGfssFCMtQIb
 d2ii63zZH7R0g==
Received: from customer (localhost [127.0.0.1])
 by submission (posteo.de) with ESMTPSA id 48zrVN17bVz9rxS
 for <bug-guix@HIDDEN>; Sat, 11 Apr 2020 12:20:11 +0200 (CEST)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Sat, 11 Apr 2020 13:10:17 +0300
To: <bug-guix@HIDDEN>
Subject: zsh: sudo is not setuid
From: "Alexandru-Sergiu Marton" <brown121407@HIDDEN>
Message-Id: <C1YAP1W11L61.2VVVOWHR0N902@121408>
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
 [fuzzy]
X-Received-From: 185.67.36.66
X-Spam-Score: 0.3 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Reply-To: Alexandru-Sergiu Marton <brown121407@HIDDEN>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

Hi,

I changed my default shell to zsh with the following line added to
my user-account record in my config.scm:

(shell #~(string-append #$zsh "/bin/zsh"))

After reconfiguring the system and rebooting, when I try to run sudo or
su (I guess this problem appears for every thing in %setuid-programs), I
get a message saying it isn't actually a setuid program.

I'm writing this from a reconfigured system started at the same point as
the zsh one started, but with bash. Here I don't have that problem --
setuid programs work as expected.

Steps to reproduce:
- $ guix pull
- Change the default shell to zsh in your config.scm, as presented
  above.
- $ sudo guix system reconfigure config.scm
- Reboot.
- Try to run sudo or su. It should give you an error.

Cheers,
Sergiu
Acknowledgement sent to Alexandru-Sergiu Marton <brown121407@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-guix@HIDDEN. Full text available.
Report forwarded to bug-guix@HIDDEN:
bug#40550; Package guix. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Mon, 13 Apr 2020 18:15:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.