Re: Upgrade problems?

From	Kenneth Parker <sea7kenp@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Upgrade problems?
Date	2021-07-21 19:20 +0200
Message-ID	<CDo2Z-8eR-1@gated-at.bofh.it> (permalink)
References	<CDkC5-63I-1@gated-at.bofh.it> <CDlRw-6JH-11@gated-at.bofh.it> <CDn6V-7DY-5@gated-at.bofh.it> <CDnzX-7Np-1@gated-at.bofh.it> <CDnJD-7QC-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Wed, Jul 21, 2021, 12:57 PM Greg Wooledge <greg@wooledge.org> wrote:

> On Wed, Jul 21, 2021 at 12:39:49PM -0400, Kenneth Parker wrote:
>
> > > Access: (0555/dr-xr-xr-x)  Uid: (    0/    root)   Gid: ( 1000/ frank)
>
> > Actually, access 555 means everyone can Read and Execute, but nobody can
> > Update.
> >
> > Root usually overrides that, which could explain why it still works.
>
> Yes.
>
> > Will chown work ?
> > >
> >
> > Actually, chmod might work better.  My system has 755, owned by Root.
> > Meaning only Root can Update, but everybody can Read and Execute.
>
> None of that explains why systemd says the thing is considered "unsafe".
> It's "unsafe" because it's owned by group "frank".
>

How did I miss that?

The only reason I can think of, for a different Group would be for
something like /var/log, so someone other than Root can read the Logs.

Thus, changing the GID back to 0 is the main issue (for suppressing the
> warning messages).  Fixing the perms from 555 to 755 is just for a bit
> of extra consistency.
>

That, and other layers of Security, such as selinux, where Root isn't
always "god".

Thanks for the clarification.

Kenneth Parker


>

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Upgrade problems? Frank McCormick <debianlist@videotron.ca> - 2021-07-21 15:40 +0200
  Re: Upgrade problems? Kushal Kumaran <kushal@locationd.net> - 2021-07-21 17:00 +0200
    Re: Upgrade problems? Frank McCormick <debianlist@videotron.ca> - 2021-07-21 18:20 +0200
      Re: Upgrade problems? Greg Wooledge <greg@wooledge.org> - 2021-07-21 18:30 +0200
        Re: Upgrade problems? Frank McCormick <debianlist@videotron.ca> - 2021-07-21 20:40 +0200
      Re: Upgrade problems? Tixy <tixy@yxit.co.uk> - 2021-07-21 18:40 +0200
        Re: Upgrade problems? Cindy Sue Causey <butterflybytes@gmail.com> - 2021-07-22 08:30 +0200
          Re: Upgrade problems? Cindy Sue Causey <butterflybytes@gmail.com> - 2021-07-22 09:00 +0200
      Re: Upgrade problems? Kenneth Parker <sea7kenp@gmail.com> - 2021-07-21 18:50 +0200
        Re: Upgrade problems? Greg Wooledge <greg@wooledge.org> - 2021-07-21 19:00 +0200
          Re: Upgrade problems? Kenneth Parker <sea7kenp@gmail.com> - 2021-07-21 19:20 +0200

csiph-web