runtime issues

Ladner, Eric (Eric.Ladner) Eric.Ladner at chevrontexaco.com
Wed Feb 11 14:18:58 EST 2004


Could you submit the top 20 or 30 lines of the config.log from the
directory where you built sudo?

It should contain the configure line used to set up the source tree.

E

-----Original Message-----
From: sudo-users-bounces at sudo.ws [mailto:sudo-users-bounces at sudo.ws] On
Behalf Of DBSMITH at OhioHealth.com
Sent: Wednesday, February 11, 2004 1:17 PM
To: Todd C. Miller
Cc: sudo-users at sudo.ws
Subject: Re: runtime issues


Todd, 

thanks for this useful info but I am not running NFS on this server.


Derek B. Smith
OhioHealth IT
UNIX / TSM / EDM Teams
614-566-4145





"Todd C. Miller" <Todd.Miller at courtesan.com>
02/11/2004 02:05 PM

 
        To:     DBSMITH at OhioHealth.com
        cc:     sudo-users at sudo.ws
        Subject:        Re: runtime issues


In message 
<OFA12BE62F.18E783F7-ON85256E37.006205F5-85256E37.006265E0 at ohiohealt
h.com>
                 so spake  (DBSMITH):

> this is still saying that sudoers should be 0440 as I run sudo reject
> prt225 as user x
> my version is 1.6.7 patch5
> running on HPUX 11i and 11.0

Is /usr/local/etc/sudo/sudoers on an NFS-mounted filesystem?  I'm
guessing that it is.  Because NFS remaps uid to a non-privileged uid
(often -2), sudo uses group permissions to read the sudoers file (that
is why sudoers should generally be mode 0440 and not mode 0400).  To
read the sudoers file, sudo will change its uid to be non-zero and its
gid to zero before opening the file.

The owner and group on your sudoers file looks correct so I'm unsure
just what the problem is.  It is possible that your NFS server is
remapping gid 0 to a different value which would prevent sudo from
reading the file.

I just tested sudo on an HP-UX 11i machine with an NFS-mounted sudoers
file and it works OK for me.  What were the configure arguments you used
when configuring sudo?

 - todd


____________________________________________________________ 
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users






More information about the sudo-users mailing list