From: Casper H.S. Dik on
"Anoop" <anoopkumarv(a)gmail.com> writes:

>-r-xr-xr-x 37 root bin 5256 Jan 5 2000 /usr/ucb/ps

Please ls
/usr/ucb/*/ps

(/usr/ucb/ps is a hardlink to /usr/lib/isaexec; it must NOT be made setuid)

Casper
From: Michael Tosch on
Anoop wrote:
> On Feb 20, 2:18 pm, Darren Dunham <ddun...(a)redwood.taos.com> wrote:
>> Anoop <anoopkum...(a)gmail.com> wrote:
>>> $ file ps.0xaGg2
>>> ps.0xaGg2: data
>>> $ ps auxgwww | grep XX
>>> ps: rename("/tmp/ps.JIa4vb","/tmp/ups_data") failed, Permission denied
>>> ps: Please notify your System Administrator
>>> wlitid 688 0.0 0.0 1008 736 pts/14 S 13:27:06 0:00 grep XX
>>> $ ll /tmp
>>> -rw-rw-r-- 1 root sys 647384 Feb 20 09:33 ps.fRaWKW
>> [...]
>>
>> So it's telling you that there's a problem with renaming to
>> /tmp/ups_data. The other tmp files are owned by root, so it should have
>> permissions to rename as well. Is /usr/ucb/pssetuid?
>>
>> --
>> Darren Dunham ddun...(a)taos.com
>> Senior Technical Consultant TAOS http://www.taos.com/
>> Got some Dr Pepper? San Francisco, CA bay area
>> < This line left intentionally blank to confuse you. >
>
>
>
>>>>>>>> Is /usr/ucb/ps setuid?
>
> How do I find that out?
>
> Will this help??
>
> $ grep "/ps " /var/sadm/install/contents | grep 4555
> /usr/bin/sparcv7/ps f none 4555 root sys 29196 23101 1121447849
> SUNWcsu
> /usr/bin/sparcv9/ps f none 4555 root sys 38536 8940 1121447849
> SUNWcsxu
> $
>

On a healthy Solaris 8 system this would be

grep "/ps " /var/sadm/install/contents | grep 4555
/usr/bin/sparcv7/ps f none 4555 root sys 28196 23827 953204029 SUNWcsu
/usr/bin/sparcv9/ps f none 4555 root sys 37096 7055 953204030 SUNWcsxu
/usr/ucb/sparcv7/ps f none 4555 root sys 22988 61065 947118751 SUNWscpu
/usr/ucb/sparcv9/ps f none 4555 root sys 31544 33406 947118759 SUNWscpux

Check the respective packages on your system with

pkgchk SUNWscpu SUNWscpux


--
Michael Tosch @ hp : com
First  |  Prev  | 
Pages: 1 2 3 4 5
Prev: Patch Downloads on Solaris 10 x86
Next: seaport absent