pkg_add on 64bits kernel w/ options MAC

[Robert Watson]

On Tue, 19 Aug 2008, Jerry Toung wrote:

> I am running into a weird issue. On a 6.2 stable, 32bits built with options 
> MAC, I can run pkg_add of anything. But a 6.2 stable, 64bits built with MAC 
> won't let me do pkg_add. If anybody has an input, please advise. Below is 
> the output on the 64 bits machine:

Sounds like a bug of some sort.  Could you send the output of "sysctl 
security.mac"?  Also, if you could use ktrace to confirm which system calls 
are returning EACCES/EPERM leading to the warnings, that would also be 
helpful.

Robert N M Watson
Computer Laboratory
University of Cambridge

> 
> net3# pkg_add test.tbz
> +CONTENTS: Can't update time for +CONTENTS: Operation not permitted
> pkg_add: tar extract of /wr/home/webmgr/test.tbz failed!
> pkg_add: unable to extract table of contents file from
> '/wr/home/webmgr/test.tbz' - not a package?
> net3#
> 
> net3# tar xvf test.tbz
> x +CONTENTS: Can't update time for +CONTENTS: Operation not permitted
> x +COMMENT: Can't update time for +COMMENT: Operation not permitted
> x +DESC: Can't update time for +DESC: Operation not permitted
> x +DISPLAY: Can't update time for +DISPLAY: Operation not permitted
> x usr/local/bin/sudo: Can't update time for usr/local/bin/sudo: Operation
> not permitted
> x usr/local/man/man8/sudo.8: Can't update time for
> usr/local/man/man8/sudo.8: Operation not permitted
> x usr/local/man/man8/visudo.8: Can't update time for
> usr/local/man/man8/visudo.8: Operation not permitted
> x usr/local/man/man5/sudoers.5
> x usr/local/sbin/visudo: Can't update time for usr/local/sbin/visudo:
> Operation not permitted
> x usr/local/libexec/sudo_noexec.so: Can't update time for
> usr/local/libexec/sudo_noexec.so: Operation not permitted
> x usr/local/libexec/sudo_noexec.la: Can't update time for
> usr/local/libexec/sudo_noexec.la: Operation not permitted
> x etc/sudoers: Can't update time for etc/sudoers: Operation not permitted
> 
> net3# uname -a
> FreeBSD net3 6.2-STABLE FreeBSD 6.2-STABLE #1: Tue Aug  5 15:10:45 PDT
> 2008     root at test:/usr/obj/usr/src/sys/MYBD  amd64
> 
> thanks,
> Jerry
> 
>