emacs, ansi-term, sudo

emacs, ansi-term, sudo

[rndd]

hi, have problems using emacs in guixsd. when i run ansi-term and try to use sudo i get this error:
"
  sudo: /run/current-system/profile/bin/sudo must be owned by uid 0 and have the setuid bit set
"

Re: emacs, ansi-term, sudo

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 1076 bytes --]

Hi,

rndd@tuta.io 写道：
> hi, have problems using emacs in guixsd. when i run ansi-term 
> and try to use sudo i get this error:
>   sudo: /run/current-system/profile/bin/sudo must be owned by 
>   uid 0 and have the setuid bit set

This is correct: sudo must be setuid to work, but 
/run/current-system/profile/bin/sudo symlinks to the store which 
cannot contain setuid binaries for security reasons.

You should be running /run/setuid-programs/sudo instead.  It 
should definitely exist, and come before 
/run/current-system/profile/bin in $PATH.  Here's mine:

  λ echo $PATH
  /home/nckx/.local/bin:/run/setuid-programs:\
  /home/nckx/.config/guix/current/bin:/home/nckx/.guix-profile/bin:\
  /home/nckx/.guix-profile/sbin:/run/current-system/profile/bin:\
  /run/current-system/profile/sbin

  λ which -a sudo
  /run/setuid-programs/sudo
  /run/current-system/profile/bin/sudo

‘ansi-term’ appears to be a terminal library, so how are you 
running it?

Could it have received an incorrect $PATH somehow?

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: emacs, ansi-term, sudo

[Ricardo Wurmus]

Tobias Geerinckx-Rice <me@tobias.gr> writes:

> ‘ansi-term’ appears to be a terminal library, so how are you running
> it?

Probably via “M-x ansi-term”.

-- 
Ricardo

Re: emacs, ansi-term, sudo

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 487 bytes --]

Ricardo Wurmus 写道：
> Tobias Geerinckx-Rice <me@tobias.gr> writes:
>> ‘ansi-term’ appears to be a terminal library, so how are you 
>> running
>> it?
>
> Probably via “M-x ansi-term”.

Ooh…  I completely missed rndd's qualifying ‘emacs’ and was 
looking at Guix packages (which gave me two libraries).  Thanks, 
Ricardo.

When I run ‘echo $PATH’ in M-x ansi-term I still get the same 
result as in my previous mail, though.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: emacs, ansi-term, sudo

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 642 bytes --]

On Sat, Nov 23, 2019 at 03:29:41PM +0100, rndd@tuta.io wrote:
> hi, have problems using emacs in guixsd. when i run ansi-term and try to use sudo i get this error:
> "
>   sudo: /run/current-system/profile/bin/sudo must be owned by uid 0 and have the setuid bit set
> "

What's the output of 'echo $PATH'? you need to have /run/setuid-programs
before /run/current-system/profile/bin to use sudo with setuid
privileges.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: emacs, ansi-term, sudo

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 656 bytes --]

Efraim, rndd,

Tobias Geerinckx-Rice 写道：
> You should be running /run/setuid-programs/sudo instead.  It 
> should
> definitely exist, and come before 
> /run/current-system/profile/bin in
> $PATH.  Here's mine:

Efraim Flashner 写道：
> What's the output of 'echo $PATH'? you need to have 
> /run/setuid-programs
> before /run/current-system/profile/bin to use sudo with setuid
> privileges.

Did either of you get my message[1]?

Just curious 'cause it's not the first time I see suspiciously 
similar messages arrive after mine.

Thanks!

T G-R

[1]: 
https://lists.gnu.org/archive/html/help-guix/2019-11/msg00167.html

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: emacs, ansi-term, sudo

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 1041 bytes --]

On Sat, Nov 23, 2019 at 06:09:12PM +0100, Tobias Geerinckx-Rice wrote:
> Efraim, rndd,
> 
> Tobias Geerinckx-Rice 写道：
> > You should be running /run/setuid-programs/sudo instead.  It should
> > definitely exist, and come before /run/current-system/profile/bin in
> > $PATH.  Here's mine:
> 
> Efraim Flashner 写道：
> > What's the output of 'echo $PATH'? you need to have /run/setuid-programs
> > before /run/current-system/profile/bin to use sudo with setuid
> > privileges.
> 
> Did either of you get my message[1]?

I did actually. I just didn't see it until after I sent mine.

> 
> Just curious 'cause it's not the first time I see suspiciously similar
> messages arrive after mine.
> 
> Thanks!
> 
> T G-R
> 
> [1]: https://lists.gnu.org/archive/html/help-guix/2019-11/msg00167.html



-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]