X2Go Bug report logs - #1063
CreateDB fails with error `DBI connect('dbname=/var/lib/x2go/x2go_sessions','',...) failed`

version graph

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: Sivachidambaram Somu <arun.lisieux@gmail.com>

Date: Tue, 26 Jul 2016 06:05:02 UTC

Severity: normal

Tags: moreinfo

Found in version 4.0.1.19-3.el6

Full log

Message #42 received at 1063@bugs.x2go.org (full text, mbox, reply):

Received: (at 1063) by bugs.x2go.org; 27 Aug 2016 16:33:35 +0000
From ionic@ionic.de  Sat Aug 27 18:33:20 2016
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=3.0 tests=BAYES_20,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham
	version=3.3.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 6DD145DEFE
	for <1063@bugs.x2go.org>; Sat, 27 Aug 2016 18:33:20 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id FsNWsc6PILLX for <1063@bugs.x2go.org>;
	Sat, 27 Aug 2016 18:33:14 +0200 (CEST)
Received: from Root24.de (powered.by.root24.eu [5.135.3.88])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id DD67F5DA8E
	for <1063@bugs.x2go.org>; Sat, 27 Aug 2016 18:33:13 +0200 (CEST)
Received: from nopileos.local (178.162.222.41.adsl.inet-telecom.org [178.162.222.41])
	by mail.ionic.de (Postfix) with ESMTPSA id 10A734F0004F;
	Sat, 27 Aug 2016 18:33:12 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1472315593; bh=FdYBM6q+drJwcACYXHmpW3YsgGQR0W73RIC5wbvsdYI=;
	h=Subject:To:References:From:Date:In-Reply-To:From;
	b=Sdo8vtmjNDfccOvflUeDhdFwvxuTGPWWi2VgENLNov0hKw+lWwH/EMZgU/4CMvLtR
	 q3DyZKpFLdwUVVJclOL7Q/qlNjnjbpaWL8YefCPgmmzNT+aZSJLx/rp1JWK7Er3PgI
	 MSbQKeLEgAx7V+qkvLcnBEViJF7AbElZJuoW58qE=
Subject: Re: CreateDB fails with error `DBI
 connect('dbname=/var/lib/x2go/x2go_sessions', '', ...) failed`
To: Sivachidambaram Somu <arun.lisieux@gmail.com>, 1063@bugs.x2go.org
References: <CAC5R9dkj8BfkaHTAhLy0U4nzMRJRtkLw5Ss1be_YM4Y64ZG8Lw@mail.gmail.com>
 <bf97b5ef-9b19-2b68-c5dd-352dcb43dbac@ionic.de>
 <CAC5R9dnZzc+1enWSTBb6-fuXYSSK6ZAwRLS+miipKUduj01krw@mail.gmail.com>
 <edc5bbf9-38b5-7e67-054c-0f0b526062dc@ionic.de>
 <CAC5R9dndn6xiS2fCQpovBLZn6yUkUw2F33XEkpZhqXrFbME9Sw@mail.gmail.com>
 <6b41f5b6-82ff-273c-ff64-390c17a44dea@ionic.de>
 <CAC5R9dn44Hz5nBn11rqEqR2u9eBBM2FRTkbtx1Oh3v=CU99rbw@mail.gmail.com>
From: Mihai Moldovan <ionic@ionic.de>
Message-ID: <406759e0-2a96-8582-cc8e-46cd28a2779b@ionic.de>
Date: Sat, 27 Aug 2016 18:33:11 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0)
 Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <CAC5R9dn44Hz5nBn11rqEqR2u9eBBM2FRTkbtx1Oh3v=CU99rbw@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="lnnR2H23b5uXjhvnkKiMqVekjdJdbdR11"

[Message part 1 (text/plain, inline)]
On 27.08.2016 12:38 PM, Sivachidambaram Somu wrote:
> About the SUID, I have not disabled it myself. Let me check the OS defaults
> again and give an update on that.

Looks like I haven't been explicit enough, sorry.

What's the output of "mount"?


> Also, I'm able to open them file 'x2golistsessions' in Vim as root. As you have
> pointed out, the operation fails as a normal user.

Wait... do you *really* mean x2golistsessions, or rather the database file
called x2go_sessions?

The script itself (x2golistsessions) should always be read- and executable by
any user.


I've also been looking around if disabling SUID support directly in the kernel
is possible, but haven't found anything related to this. Looks like the only way
to achieve that is via a mount flag. If that's not the case, I'm running dry here.



Mihai


[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 15:05:52 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.