| View previous topic :: View next topic |
| Author |
Message |
VinzC
Advocate
Joined: 17 Apr 2004
Posts: 4553
Location: Spa (Belgium)
|
 Posted: Sat Apr 07, 2012 7:24 pm Post subject: PBM: $TMP directory inaccessible with LXDM and PAM/mktemp |
 |
|
Hi all.
Today I wanted to provide secure TMP directories to my user accounts hence enabled PAM "mktemp" use flag. To my surprise $TMP contains /tmp/.private/nobody regardless of who opens an LXDE session  .
| Code: | media@scotty ~ $ echo $TMP
/tmp/.private/nobody |
Listing $TMP yields a "permission denied" of course. I think that's also the reason why pcmanfm doesn't start anymore.
This issue ocurs only when I log on from LXDM; everything's fine when I log on a tty. Does anyone have an idea what I should do to fix this?
Thanks in advance for any hint or suggestion.
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
GNU/Linux user #369763
“Wow! I feel root” |
|
| Back to top |
|
 |
VinzC
Advocate
Joined: 17 Apr 2004
Posts: 4553
Location: Spa (Belgium)
|
| Posted: Mon Apr 30, 2012 8:14 am Post subject: |
|
|
Looks like there's a currently in-process bug about this.
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
GNU/Linux user #369763
“Wow! I feel root” |
|
| Back to top |
|
|
kimmie
Guru
Joined: 08 Sep 2004
Posts: 531
Location: Australia
|
|
| Back to top |
|
|
VinzC
Advocate
Joined: 17 Apr 2004
Posts: 4553
Location: Spa (Belgium)
|
| Posted: Sat May 12, 2012 5:56 pm Post subject: |
|
|
Yeah, sounds so. I just wonder why this "nobody" thing and what «[...] when the user is switched
during authentication» is supposed to mean.
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
GNU/Linux user #369763
“Wow! I feel root” |
|
| Back to top |
|
|
kimmie
Guru
Joined: 08 Sep 2004
Posts: 531
Location: Australia
|
| Posted: Sun May 13, 2012 10:53 pm Post subject: |
|
|
| The smbd daemon runs as root. When a connection occurs it creates a private tmp directory with uid of nobody, and spawns a process to handle the session which uses that tempory directory as it's current directory. The session process then switches to the uid of the connected user, after which it can no longer access its own current directory. Kaboom! |
|
| Back to top |
|
|
VinzC
Advocate
Joined: 17 Apr 2004
Posts: 4553
Location: Spa (Belgium)
|
| Posted: Mon May 14, 2012 7:50 am Post subject: |
|
|
Hmmm... it then means LXDM runs that way too or uses such a mechanism, right? Anyway this user switching that is said PAM doesn't like rather means pam_mktemp doesn't like it if I've gotten it right. Also it looks questionable to me as to switching to user nobody beforehand because it might happen that concurrent authentications do clash; I might be wrong of course since I'm no PAM specialist.
_________________
Gentoo addict: tomorrow I quit, I promise!... Just one more emerge...
GNU/Linux user #369763
“Wow! I feel root” |
|
| Back to top |
|
|
kimmie
Guru
Joined: 08 Sep 2004
Posts: 531
Location: Australia
|
| Posted: Mon May 14, 2012 8:39 am Post subject: |
|
|
| I'm not sure what happens where, but yeah, it looks like both LXDM and samba have similar issues with pam_mktemp. |
|
| Back to top |
|
|
|
Desktop Environments
