owl-users - Re: can't create users under openvz container

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 30 Sep 2009 00:01:58 +0400
From: "Dmitry V. Levin" <ldv@...linux.org>
To: owl-users@...ts.openwall.com
Subject: Re: can't create users under openvz container

On Tue, Sep 29, 2009 at 11:53:41PM +0400, croco@...nwall.com wrote:
[...]
> Using strace I see the following:
> 
> open("/etc/tcb/crocodil/shadow.lock",
> O_WRONLY|O_CREAT|O_NOCTTY|O_NONBLOCK|O_NOFOLLOW, 0600) = -1 EACCES
> (Permission denied)

Looks like something odd happened with permissions, either with
/etc/tcb/crocodil or one of its parents.

/etc/tcb/crocodil should be owned by crocodil:auth and have access mode 02710.
/etc/tcb -- root:shadow and 0710.
/etc and / should have access mode a+x.

-- 
ldv

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]