amanda 3.3.3

[Dagobert Michelsen]

Hi Upen,

Am 14.11.2013 um 18:42 schrieb upen:
> By the way, after moving the configuration, I saw amcheck failed with
> 'permission denied'. This looked likeissue with permissions on the
> amcheck binary.
> 
> Iamroot#su - amanda -c "/opt/csw/sbin/amcheck -a monthlyfull"
> Amanda Backup Client Hosts Check
> --------------------------------
> WARNING: client: selfcheck request failed: Permission denied
> Client check: 1 host checked in 10.023 seconds.  1 problem found.
> 
> Debug log for amcheck:
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients: connect_port:
> Skip port 513: owned by login.
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients: connect_port:
> Skip port 514: owned by shell.
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients: connect_port:
> Skip port 515: owned by printer.
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients: make_socket
> opening socket with family 2
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients: connect_port:
> Try  port 516: available - Permission denied
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients: stream_client:
> Could not bind to port in range 512-1023.
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients:
> security_seterror(handle=55d50, driver=ff17c360 (BSDTCP)
> error=Permission denied)
> Thu Nov 14 11:13:19 2013: thd-34400: amcheck-clients:
> security_close(handle=55d50, driver=ff17c360 (BSDTCP))
> 
> The permissions on the below binaries are not  set-uid root.
> bash-3.00# ls -al /opt/csw/sbin/am*
> -rwxr-xr-x   1 root     bin        15399 Apr 24  2013 /opt/csw/sbin/amaddclient
> -rwxr-xr-x   1 root     bin        53872 Apr 24  2013 /opt/csw/sbin/amadmin
> -rwxr-xr-x   1 root     bin         3383 Apr 24  2013 /opt/csw/sbin/amaespipe
> -rwxr-xr-x   1 root     bin        15604 Apr 24  2013 /opt/csw/sbin/amarchiver
> -rwxr-xr-x   1 root     bin        64132 Apr 24  2013 /opt/csw/sbin/amcheck
> -rwxr-xr-x   1 root     bin         1859 Apr 24  2013 /opt/csw/sbin/amcheckdb
> -rwxr-xr-x   1 root     bin        14587 Apr 24  2013 /opt/csw/sbin/amcheckdump
> -rwxr-xr-x   1 root     bin         6356 Apr 24  2013 /opt/csw/sbin/amcleanup
> -rwxr-xr-x   1 root     bin         4254 Apr 24  2013
> /opt/csw/sbin/amcleanupdisk
> -rwxr-xr-x   1 root     bin         1065 Apr 24  2013 /opt/csw/sbin/amcrypt
> -rwxr-xr-x   1 root     bin         3209 Apr 24  2013 /opt/csw/sbin/amcrypt-ossl
> -rwxr-xr-x   1 root     bin         6982 Apr 24  2013
> /opt/csw/sbin/amcrypt-ossl-asym
> -rwxr-xr-x   1 root     bin         4660 Apr 24  2013
> /opt/csw/sbin/amcryptsimple
> -rwxr-xr-x   1 root     bin         4613 Apr 24  2013 /opt/csw/sbin/amdevcheck
> -rwxr-xr-x   1 root     bin        10705 Apr 24  2013 /opt/csw/sbin/amdump
> -rwxr-xr-x   1 root     bin         4876 Apr 24  2013
> /opt/csw/sbin/amdump_client
> -rwxr-xr-x   1 root     bin        27510 Apr 24  2013 /opt/csw/sbin/amfetchdump
> -rwxr-xr-x   1 root     bin        27068 Apr 24  2013 /opt/csw/sbin/amflush
> -rwxr-xr-x   1 root     bin        12529 Apr 24  2013 /opt/csw/sbin/amgetconf
> -rwxr-xr-x   1 root     bin         2741 Apr 24  2013 /opt/csw/sbin/amgpgcrypt
> -rwxr-xr-x   1 root     bin        11490 Apr 24  2013 /opt/csw/sbin/amlabel
> -rwxr-xr-x   1 root     bin       150028 Apr 24  2013 /opt/csw/sbin/amoldrecover
> -rwxr-xr-x   1 root     bin         6576 Apr 24  2013 /opt/csw/sbin/amoverview
> -rwxr-xr-x   1 root     bin         6110 Apr 24  2013 /opt/csw/sbin/amplot
> -rwxr-xr-x   1 root     bin       138924 Apr 24  2013 /opt/csw/sbin/amrecover
> -rwxr-xr-x   1 root     bin        18067 Apr 24  2013 /opt/csw/sbin/amreport
> -rwxr-xr-x   1 root     bin        13005 Apr 24  2013 /opt/csw/sbin/amrestore
> -rwxr-xr-x   1 root     bin         9120 Apr 24  2013 /opt/csw/sbin/amrmtape
> -rwxr-xr-x   1 root     bin        21487 Apr 24  2013
> /opt/csw/sbin/amserverconfig
> -rwxr-xr-x   1 root     bin        16616 Apr 24  2013 /opt/csw/sbin/amservice
> -rwxr-xr-x   1 root     bin        50440 Apr 24  2013 /opt/csw/sbin/amstatus
> -rwxr-xr-x   1 root     bin        19936 Apr 24  2013 /opt/csw/sbin/amtape
> -rwxr-xr-x   1 root     bin        23098 Apr 24  2013 /opt/csw/sbin/amtapetype
> -rwxr-xr-x   1 root     bin         7730 Apr 24  2013 /opt/csw/sbin/amtoc
> -rwxr-xr-x   1 root     bin        30300 Apr 24  2013 /opt/csw/sbin/amvault
> 
> 
> I changed permissions on amcheck (chmod u+s amcheck) and 'permission
> denied' issue was resolved immediately.
> 
> Now I am not sure how many of those binaries have to have set-uid
> root. I don't have record of permissions for binaries that came with
> CSWamanda# 3.1.1. Can someone advice?

I guess this was missed when converting from the legacy package to our new buildsystem:
  http://sourceforge.net/apps/trac/gar/browser/csw/mgar/pkg/amanda/trunk/Makefile
(See --disable-installperms) This needs to be converted to permission settings in
the package.

> Also, I am not sure if this issue happened on my box because I
> installed new version just by doing 'pkgutil -u amanda  ' instead of
> uninstalling the 3.1.1 and then installing the new version from fresh.
> Or those permissions coming straight from the package?

This is a problem with the package. Would you please open a bug report?
  http://www.opencsw.org/packages/amanda/


Best regards

  -- Dago