From: Jerome BENOIT on
Hello,

Frank Bonnet wrote:
> Sven Joachim wrote:
>> On 2009-09-18 09:34 +0200, Frank Bonnet wrote:
>>
>>> I'm trying to change a local user passwd as root and I get this error
>>> message ... which seems a bit unreal to me ...
>>>
>>>
>>> passwd: Permission denied
>>> passwd: password unchanged
>>
>> What does "lsattr /etc/passwd /etc/shadow" print?
>
> this ... how it has been changed ? this is a fresh install
> does this mean another admin has changed the default attr ?
>
>
> lsattr /etc/passwd /etc/shadow
> ------------------- /etc/passwd
> ------------------- /etc/shadow
>

I guess that `ls -l' is clean too:
is the associated partition mounted as read-only ?

Jerome

>>
>> Sven
>>
>>
>
>

--
Jerome BENOIT
jgmbenoit_at_mailsnare_dot_net


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Jerome BENOIT on


Frank Bonnet wrote:
> Jerome BENOIT wrote:
>> Hello Frank,
>>
>> what gives
>> ls -l /etc/passwd
>> lsattr /etc/passwd
>
> well I am logged as root which is supposed in a UNIX world
> to have access to all files of the local filesystem without
> access right checking huh ?

may be, but you issue is, as you said, unreal.

have you strace passwd to have a better idea of what is going on ?

Jerome

>
>
> ls -l /etc/passwd
> -rw-r--r-- 1 root root 1358 2009-09-18 09:21 /etc/passwd
>
>
> lsattr /etc/passwd
> ------------------- /etc/passwd
>
>>
>> ?
>>
>> Jerome
>>
>> Frank Bonnet wrote:
>>> Hello
>>>
>>> I'm trying to change a local user passwd as root and I get this error
>>> message ... which seems a bit unreal to me ...
>>>
>>>
>>> passwd: Permission denied
>>> passwd: password unchanged
>>>
>>>
>>> The machine is running Lenny 64 bits
>>>
>>> Thank you
>>>
>>>
>>
>
>

--
Jerome BENOIT
jgmbenoit_at_mailsnare_dot_net


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Frank Bonnet on
Jerome BENOIT wrote:
> Hello,
>
> Frank Bonnet wrote:
>> Sven Joachim wrote:
>>> On 2009-09-18 09:34 +0200, Frank Bonnet wrote:
>>>
>>>> I'm trying to change a local user passwd as root and I get this error
>>>> message ... which seems a bit unreal to me ...
>>>>
>>>>
>>>> passwd: Permission denied
>>>> passwd: password unchanged
>>>
>>> What does "lsattr /etc/passwd /etc/shadow" print?
>>
>> this ... how it has been changed ? this is a fresh install
>> does this mean another admin has changed the default attr ?
>>
>>
>> lsattr /etc/passwd /etc/shadow
>> ------------------- /etc/passwd
>> ------------------- /etc/shadow
>>
>
> I guess that `ls -l' is clean too:
> is the associated partition mounted as read-only ?
>
> Jerome

no the files are standing on the / partition


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Sven Joachim on
On 2009-09-18 11:26 +0200, Frank Bonnet wrote:

> Sven Joachim wrote:
>> On 2009-09-18 09:34 +0200, Frank Bonnet wrote:
>>
>>> I'm trying to change a local user passwd as root and I get this error
>>> message ... which seems a bit unreal to me ...
>>>
>>>
>>> passwd: Permission denied
>>> passwd: password unchanged
>>
>> What does "lsattr /etc/passwd /etc/shadow" print?
>
> this ... how it has been changed ? this is a fresh install
> does this mean another admin has changed the default attr ?

This may happen because of an intruder or because of file system
corruption. I've seen the latter a few times on this list. But...

> lsattr /etc/passwd /etc/shadow
> ------------------- /etc/passwd
> ------------------- /etc/shadow

....this is how it's supposed to be, i.e. no special attributes. Can
you run the process under strace?

Sven


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Sven Joachim on
On 2009-09-18 11:37 +0200, Jerome BENOIT wrote:

> I guess that `ls -l' is clean too:
> is the associated partition mounted as read-only ?

AFAIK in that case the error message would be "Read-only file system"
rather than "Permission denied".

Sven


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org