From ionic@ionic.de  Sat Aug 27 18:33:20 2016
Received: (at 1063) by bugs.x2go.org; 27 Aug 2016 16:33:35 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=3.0 tests=BAYES_20,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham
	version=3.3.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 6DD145DEFE
	for <1063@bugs.x2go.org>; Sat, 27 Aug 2016 18:33:20 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id FsNWsc6PILLX for <1063@bugs.x2go.org>;
	Sat, 27 Aug 2016 18:33:14 +0200 (CEST)
Received: from Root24.de (powered.by.root24.eu [5.135.3.88])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id DD67F5DA8E
	for <1063@bugs.x2go.org>; Sat, 27 Aug 2016 18:33:13 +0200 (CEST)
Received: from nopileos.local (178.162.222.41.adsl.inet-telecom.org [178.162.222.41])
	by mail.ionic.de (Postfix) with ESMTPSA id 10A734F0004F;
	Sat, 27 Aug 2016 18:33:12 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1472315593; bh=FdYBM6q+drJwcACYXHmpW3YsgGQR0W73RIC5wbvsdYI=;
	h=Subject:To:References:From:Date:In-Reply-To:From;
	b=Sdo8vtmjNDfccOvflUeDhdFwvxuTGPWWi2VgENLNov0hKw+lWwH/EMZgU/4CMvLtR
	 q3DyZKpFLdwUVVJclOL7Q/qlNjnjbpaWL8YefCPgmmzNT+aZSJLx/rp1JWK7Er3PgI
	 MSbQKeLEgAx7V+qkvLcnBEViJF7AbElZJuoW58qE=
Subject: Re: CreateDB fails with error `DBI
 connect('dbname=/var/lib/x2go/x2go_sessions', '', ...) failed`
To: Sivachidambaram Somu <arun.lisieux@gmail.com>, 1063@bugs.x2go.org
References: <CAC5R9dkj8BfkaHTAhLy0U4nzMRJRtkLw5Ss1be_YM4Y64ZG8Lw@mail.gmail.com>
 <bf97b5ef-9b19-2b68-c5dd-352dcb43dbac@ionic.de>
 <CAC5R9dnZzc+1enWSTBb6-fuXYSSK6ZAwRLS+miipKUduj01krw@mail.gmail.com>
 <edc5bbf9-38b5-7e67-054c-0f0b526062dc@ionic.de>
 <CAC5R9dndn6xiS2fCQpovBLZn6yUkUw2F33XEkpZhqXrFbME9Sw@mail.gmail.com>
 <6b41f5b6-82ff-273c-ff64-390c17a44dea@ionic.de>
 <CAC5R9dn44Hz5nBn11rqEqR2u9eBBM2FRTkbtx1Oh3v=CU99rbw@mail.gmail.com>
From: Mihai Moldovan <ionic@ionic.de>
Message-ID: <406759e0-2a96-8582-cc8e-46cd28a2779b@ionic.de>
Date: Sat, 27 Aug 2016 18:33:11 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0)
 Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <CAC5R9dn44Hz5nBn11rqEqR2u9eBBM2FRTkbtx1Oh3v=CU99rbw@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="lnnR2H23b5uXjhvnkKiMqVekjdJdbdR11"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--lnnR2H23b5uXjhvnkKiMqVekjdJdbdR11
Content-Type: multipart/mixed; boundary="Ebgp9DUL1fwrdbBPQDokuvEPkCuNjGbTm"
From: Mihai Moldovan <ionic@ionic.de>
To: Sivachidambaram Somu <arun.lisieux@gmail.com>, 1063@bugs.x2go.org
Message-ID: <406759e0-2a96-8582-cc8e-46cd28a2779b@ionic.de>
Subject: Re: CreateDB fails with error `DBI
 connect('dbname=/var/lib/x2go/x2go_sessions', '', ...) failed`
References: <CAC5R9dkj8BfkaHTAhLy0U4nzMRJRtkLw5Ss1be_YM4Y64ZG8Lw@mail.gmail.com>
 <bf97b5ef-9b19-2b68-c5dd-352dcb43dbac@ionic.de>
 <CAC5R9dnZzc+1enWSTBb6-fuXYSSK6ZAwRLS+miipKUduj01krw@mail.gmail.com>
 <edc5bbf9-38b5-7e67-054c-0f0b526062dc@ionic.de>
 <CAC5R9dndn6xiS2fCQpovBLZn6yUkUw2F33XEkpZhqXrFbME9Sw@mail.gmail.com>
 <6b41f5b6-82ff-273c-ff64-390c17a44dea@ionic.de>
 <CAC5R9dn44Hz5nBn11rqEqR2u9eBBM2FRTkbtx1Oh3v=CU99rbw@mail.gmail.com>
In-Reply-To: <CAC5R9dn44Hz5nBn11rqEqR2u9eBBM2FRTkbtx1Oh3v=CU99rbw@mail.gmail.com>

--Ebgp9DUL1fwrdbBPQDokuvEPkCuNjGbTm
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 27.08.2016 12:38 PM, Sivachidambaram Somu wrote:
> About the SUID, I have not disabled it myself. Let me check the OS defa=
ults
> again and give an update on that.

Looks like I haven't been explicit enough, sorry.

What's the output of "mount"?


> Also, I'm able to open them file 'x2golistsessions' in Vim as root. As =
you have
> pointed out, the operation fails as a normal user.

Wait... do you *really* mean x2golistsessions, or rather the database fil=
e
called x2go_sessions?

The script itself (x2golistsessions) should always be read- and executabl=
e by
any user.


I've also been looking around if disabling SUID support directly in the k=
ernel
is possible, but haven't found anything related to this. Looks like the o=
nly way
to achieve that is via a mount flag. If that's not the case, I'm running =
dry here.



Mihai


--Ebgp9DUL1fwrdbBPQDokuvEPkCuNjGbTm--

--lnnR2H23b5uXjhvnkKiMqVekjdJdbdR11
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=xKwu
-----END PGP SIGNATURE-----

--lnnR2H23b5uXjhvnkKiMqVekjdJdbdR11--

