[Fwd: mlock: not setgid mail]

[Fabian Keil]

Richard McIntyre <rem at thecompanyonline.com> wrote:

> Anyone ?

> I have searched several places and everything I have seen reports that 
> the only thing I need to do is chown /usr/local/libexec/mlock to 
> root:mail but it currently is... take a look:
> 
> May 24 12:54:59 tco1 /usr/local/libexec/mlock[29327]: (64) not setgid mail
> May 24 12:57:08 tco1 /usr/local/libexec/mlock[29382]: (64) not setgid mail
> May 24 12:57:08 tco1 /usr/local/libexec/mlock[29384]: (64) not setgid mail
> May 24 13:03:33 tco1 /usr/local/libexec/mlock[30399]: (64) not setgid mail
> May 24 13:04:23 tco1 /usr/local/libexec/mlock[30401]: (64) not setgid mail
> May 24 13:04:32 tco1 /usr/local/libexec/mlock[30403]: (64) not setgid mail
> 
> tco1# ls -ail /usr/local/libexec/
> total 4104
> 1626383 drwxr-xr-x   6 root  wheel      512 May 24 13:00 .
> 1625088 drwxr-xr-x  16 root  wheel      512 May  6 13:36 ..
> 1746408 drwxr-xr-x   2 root  wheel      512 May  3 22:35 autoconf259
> 1746417 drwxr-xr-x   2 root  wheel      512 May  3 22:35 automake19
> 1627965 -r-xr-xr-x   1 root  wheel    63624 May 24 13:00 imapd
> 1627966 -r-xr-xr-x   1 root  wheel    14568 May 24 13:00 ipop2d
> 1627967 -r-xr-xr-x   1 root  wheel    22344 May 24 13:00 ipop3d
> 1672841 drwxr-xr-x   2 root  wheel      512 May  3 00:22 libtool13
> 1626599 drwxr-xr-x   2 root  wheel      512 May  2 23:43 libtool15
> 1627968 -rwx--s--x   1 root  mail      5808 May 24 13:00 mlock
> 1628238 -r-xr-xr-x   1 root  wheel  4050712 May  5 17:08 mysqld
> 
> I'm quite perplexed as to what to do about this, I also read a 
> suggestion to rebuild the /usr/ports/mail/imap-uw so I did, but that has 
> not assisted any.
> 
> Any suggestions would be GREATLY appreciated.

Just a guess.

Try to comment the setguid check made by mlock out and recompile.

Some programs seem to have problems checking if they are setgid or setuid
in FreeBSD 5.X.

Older versions of cdda2wav for example don't work suid and guid in
FreeBSD 5.X. The check if dropping root/wheel privileges was successful
fails, cdda2wav exits. 

In recent versions the check is commented out for FreeBSD, cdda2wav works.

Fabian
-- 
http://www.fabiankeil.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050529/b2ceb1b0/attachment.bin