From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id 4DFaJfzGR2TSBgAASxT56A (envelope-from ) for ; Tue, 25 Apr 2023 14:26:36 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 2AAWJfzGR2T6dQAAauVa8A (envelope-from ) for ; Tue, 25 Apr 2023 14:26:36 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 556E52EAD1 for ; Tue, 25 Apr 2023 14:26:36 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1prHkI-0001vk-4D; Tue, 25 Apr 2023 08:26:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1prHkE-0001uR-8d for guix-devel@gnu.org; Tue, 25 Apr 2023 08:26:06 -0400 Received: from jpoiret.xyz ([206.189.101.64]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1prHkA-00052j-4g for guix-devel@gnu.org; Tue, 25 Apr 2023 08:26:04 -0400 Received: from authenticated-user (jpoiret.xyz [206.189.101.64]) by jpoiret.xyz (Postfix) with ESMTPA id 7ADA0184F6B; Tue, 25 Apr 2023 12:25:57 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jpoiret.xyz; s=dkim; t=1682425558; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=8h0xcnEv10FJOXkgCFX3Rz7vw9Urc29k8AZVS14V1lw=; b=ruvzYLIrkPEnjAV91eIN9w3z/r68FwgzftpkeLM2AN/Ap9+OrRNVAuJoJThmhf/rmuguqV 3YVSlZwIi2sj08BhjcvKHMJZX6Ej4M0kXxvkoDJxtKxKryHIS7Plm4No3gyOh64h9pnToA 7XnCTLyEBIm5mYCN30zuz4qfvhgKLoDer4L4oTSvDaNjtKH49cP22DOQlsEHSW4aHuYOJe p8tv69bZV+iemE0f7fcagcjnkfEtpdxy4Z77zWFtv5U+VY3auan3DOdrvQKkidu/r4d7ZN /LRtkVYDyk/el3Vdn7V4K/wq2zpi8KKzaAX7cA1kPLZ/KiTPV7U3eRE/O4StRA== From: Josselin Poiret To: Felix Lechner , Guix Devel Subject: Re: Setuid handling? In-Reply-To: References: Date: Tue, 25 Apr 2023 14:25:42 +0200 Message-ID: <87354otagp.fsf@jpoiret.xyz> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spamd-Bar: + Received-SPF: pass client-ip=206.189.101.64; envelope-from=dev@jpoiret.xyz; helo=jpoiret.xyz X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Seal: i=1; s=key1; d=yhetil.org; t=1682425596; a=rsa-sha256; cv=none; b=joL5e0qRxF5Ak1WJ/lvsWwymSItVitdUX1jXL652qDOnxzDXKVbTkSMKF3i2g76UkFP8cN xrOQ3MkwgG2K89E4p377LNztYU/z3k0BDKZhIvLbEEeipdO9MJeB75kvNw50wqXaYeULWJ YjabwuYJSGgIrGRRK28Jtor3mwOFoid7S//76eh0MGAVxuC2IxGBsaATwiFbKtx2QftsZD eDLMA1caGx1BFAv+kxBu7fYbJhQvafiozCQLaixoruZ9j7GipdCu9YmgfEW79wwlsdjfe2 FwAlgnnz6/gbsx+CuL7p61UhTOO4nCuJD9pIsh8KLd3/APp7h5xr/K58DQy24A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=jpoiret.xyz header.s=dkim header.b=ruvzYLIr; dmarc=pass (policy=reject) header.from=jpoiret.xyz; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1682425596; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=8h0xcnEv10FJOXkgCFX3Rz7vw9Urc29k8AZVS14V1lw=; b=Ifmbu8LVpRz67qSObqg6ygplvhnzf6XeFnaA/nhHh1E5L7ec5COB+Lm8inSMrF4Y5Gtn3O MW3KCDcoxDsFVSAVDZccQT2Kxxvo6G1mz89SQ2imNmB+67bTl0CN7jkeh71Jxdn3E3bO3H ZCXu9jnl3fSJ4TNYGOR4TOCMcdiYeiHMNC8yPuTBShJMBprhUw7HeFEdAyHe0W27UwMGNX 0CLWOq7VaRDSJ2LGE/cDbqe3YyTjdaIqnqetP8v1Nfmxz2DHuUvfBCMZiZIcCOpgjtOeBT O6hfRFGnqPJAtROH0nLH7ZGJBinMI+R93npCDOZRHBKyWxfkE1pqeUN9XHAS9A== X-Migadu-Spam-Score: -6.38 X-Spam-Score: -6.38 X-Migadu-Queue-Id: 556E52EAD1 X-Migadu-Scanner: scn0.migadu.com Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=jpoiret.xyz header.s=dkim header.b=ruvzYLIr; dmarc=pass (policy=reject) header.from=jpoiret.xyz; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-TUID: pEh0iedLXKiw --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi, Felix Lechner via "Development of GNU Guix and the GNU System distribution." writes: > Hi, > > After reconfiguring today (see below) I can no longer invoke a > familiar set of setuid executables: > > $ su - > su: Not setuid and you are not root, expect this to fail > root's password: > > $ mailq > mailq: need root privileges > > Has the handling for such executables changed? What is `command -v su`, and `ls /run/setuid-programs/`? Have you rebooted since reconfiguring? Best, =2D-=20 Josselin Poiret --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQHEBAEBCAAuFiEEOSSM2EHGPMM23K8vUF5AuRYXGooFAmRHxsYQHGRldkBqcG9p cmV0Lnh5egAKCRBQXkC5FhcaikqDC/9GD0fRb2PQ8lmn3bl6vKxslNwuivbyT2x5 OtbhfcFQljkSHSaCfGa5xtA9ZS75+VsMgCg9txo0bgHhm6pHV5skxVwuHtsWFNP4 bUxoTf8DzX8X1WPE4aamkEZHa7x5xJpDtQWcDdKkptj21E4d5KouIm1nQnhiH7Dz GT0uFfLM2xQ+eou7jtddyr1AMjQjb4QkcJxz/tL24s8tDJ7fzce8aq/6m/FzhMW9 tAMNRponHPzHSrHwAwzzmn/I1H2Cp9jJdx57SkgRox/B91q1nCRoM+DfYzgZmzpf mSZ1BxX36X/ppV/Qd/MQWyNN1WzcQwmRYWo3IDtN85OIJCPsQSxZ2G5S1uCB29nv F1EwE2AcVRJv9Lah9GuDTTpwVh/xEivTCOy+1l9Oa91EqKELVBexFItzhy/LQrs4 oMrOfxxQ/+8NBXqy+ULxnPBilqlEWtGOJWjgU48ab+BlJIbA6eyTGQp5xs+DM7zZ 5GozVH3JOzCjhJwh9AaVCLC81+3vGok= =n0s/ -----END PGP SIGNATURE----- --=-=-=--