X2Go Bug report logs - #1063
CreateDB fails with error `DBI connect('dbname=/var/lib/x2go/x2go_sessions','',...) failed`

version graph

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: Sivachidambaram Somu <arun.lisieux@gmail.com>

Date: Tue, 26 Jul 2016 06:05:02 UTC

Severity: normal

Tags: moreinfo

Found in version 4.0.1.19-3.el6

Full log

Message #22 received at 1063@bugs.x2go.org (full text, mbox, reply):

Received: (at 1063) by bugs.x2go.org; 14 Aug 2016 02:10:50 +0000
From ionic@ionic.de  Sun Aug 14 04:10:48 2016
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=3.0 tests=BAYES_20,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham
	version=3.3.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id E31835DEFE
	for <1063@bugs.x2go.org>; Sun, 14 Aug 2016 04:10:47 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ecpnLXNoND5q for <1063@bugs.x2go.org>;
	Sun, 14 Aug 2016 04:10:41 +0200 (CEST)
Received: from Root24.de (powered.by.root24.eu [5.135.3.88])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 252A55DDF4
	for <1063@bugs.x2go.org>; Sun, 14 Aug 2016 04:10:40 +0200 (CEST)
Received: from nopileos.local (178.162.222.41.adsl.inet-telecom.org [178.162.222.41])
	by mail.ionic.de (Postfix) with ESMTPSA id 600754F0346E;
	Sun, 14 Aug 2016 04:10:40 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1471140640; bh=qAm4fggRr16vYgCWUXg+T542Uh2U/CtaWhF5e0j/vvc=;
	h=Subject:To:References:From:Date:In-Reply-To:From;
	b=ZcB4J2rGGCiFBTwPfNdvcDq5H506UFYMi8gS1qv2xIXuNj56sKjAXIzWO2LS9YVRB
	 p0RA0W040mKTi5OUIsDUgTHkYxCaSajDkzkMmlduKyR2MQKNb1yUfpY3v2yvoZo6zt
	 jaTnZi+8+eWQdVXQ4AT+e70XB4evBbnmJdzQmNgo=
Subject: Re: CreateDB fails with error `DBI
 connect('dbname=/var/lib/x2go/x2go_sessions', '', ...) failed`
To: Sivachidambaram Somu <arun.lisieux@gmail.com>, 1063@bugs.x2go.org
References: <CAC5R9dkj8BfkaHTAhLy0U4nzMRJRtkLw5Ss1be_YM4Y64ZG8Lw@mail.gmail.com>
 <bf97b5ef-9b19-2b68-c5dd-352dcb43dbac@ionic.de>
 <CAC5R9dnZzc+1enWSTBb6-fuXYSSK6ZAwRLS+miipKUduj01krw@mail.gmail.com>
From: Mihai Moldovan <ionic@ionic.de>
Message-ID: <edc5bbf9-38b5-7e67-054c-0f0b526062dc@ionic.de>
Date: Sun, 14 Aug 2016 04:10:37 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0)
 Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <CAC5R9dnZzc+1enWSTBb6-fuXYSSK6ZAwRLS+miipKUduj01krw@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="L4VoUb6QN9UBrjnd0xuIdUijmNEkiFmeI"

[Message part 1 (text/plain, inline)]
On 14.08.2016 03:12 AM, Sivachidambaram Somu wrote:
> When I run the command with elevated privileges, the created DB file is owned by
> root and it remains unaccessible when the client tries to establish a connection.

That's both true and expected.

The x2goserver scripts (for instance x2golistsessions) call a setuid/setgid
binary called libx2go-server-db-sqlite3-wrapper (nightlies) or x2gosqlitewrapper
(release version.)

They should reside in /usr/lib/x2go/.

Due to that the session DB can be read even as a user.

Are these binaries not correctly installed on your system?



Mihai



[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Fri Apr 19 08:31:59 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.