pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feed"root" execution not permitted. and busybox
7+ messages / 7 participants
[nested] [flat]
* "root" execution not permitted. and busybox
@ 2010-12-23 22:03 nbald <nicolas.baldeck@vizille.net>
0 siblings, 2 replies; 7+ messages in thread
From: nbald @ 2010-12-23 22:03 UTC (permalink / raw)
To: pgsql-admin
Hi guys,
this is driving me crazy... Do someone have an idea ?
# echo 'pgsql:pgsql:100:100:pgsql:/home/pgsql:/bin/sh' >> /etc/passwd
# su - pgsql
warning: cannot change to home directory
BusyBox v1.7.2 (2010-12-23 22:00:59 CET) built-in shell (ash)
Enter 'help' for a list of built-in commands.
$ /tmp/mnt/usb0/part1/usr/bin/postmaster -D '/tmp/mnt/usb0/part1/caisse/db'
"root" execution of the PostgreSQL server is not permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromise. See the documentation for
more information on how to properly start the server.
$ su
su: applet requires root privileges!
$
--
View this message in context: http://postgresql.1045698.n5.nabble.com/root-execution-not-permitted-and-busybox-tp3317041p3317041.h...
Sent from the PostgreSQL - admin mailing list archive at Nabble.com.
^ permalink raw reply [nested|flat] 7+ messages in thread
* "root" execution not permitted. and busybox
@ 2010-12-23 22:05 Nicolas BALDECK <nicolas@vizille.net>
0 siblings, 1 reply; 7+ messages in thread
From: Nicolas BALDECK @ 2010-12-23 22:05 UTC (permalink / raw)
To: pgsql-admin
Hi guys,
this is driving me crazy... Do someone have an idea ?
# echo 'pgsql:pgsql:100:100:pgsql:/home/pgsql:/bin/sh' >> /etc/passwd
# su - pgsql
warning: cannot change to home directory
BusyBox v1.7.2 (2010-12-23 22:00:59 CET) built-in shell (ash)
Enter 'help' for a list of built-in commands.
$ /tmp/mnt/usb0/part1/usr/bin/postmaster -D '/tmp/mnt/usb0/part1/caisse/db'
"root" execution of the PostgreSQL server is not permitted.
The server must be started under an unprivileged user ID to prevent
possible system security compromise. See the documentation for
more information on how to properly start the server.
$ su
su: applet requires root privileges!
$
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: "root" execution not permitted. and busybox
@ 2010-12-23 22:35 Tom Lane <tgl@sss.pgh.pa.us>
parent: nbald <nicolas.baldeck@vizille.net>
1 sibling, 1 reply; 7+ messages in thread
From: Tom Lane @ 2010-12-23 22:35 UTC (permalink / raw)
To: nbald <nicolas.baldeck@vizille.net>; +Cc: pgsql-admin
nbald <nicolas.baldeck@vizille.net> writes:
> this is driving me crazy... Do someone have an idea ?
> # echo 'pgsql:pgsql:100:100:pgsql:/home/pgsql:/bin/sh' >> /etc/passwd
That might have been the only way to create a Unix user account back
around 1972, but it hardly seems like the recommended way now. Doesn't
your distro provide a tool for that?
> # su - pgsql
> warning: cannot change to home directory
> BusyBox v1.7.2 (2010-12-23 22:00:59 CET) built-in shell (ash)
> Enter 'help' for a list of built-in commands.
> $ /tmp/mnt/usb0/part1/usr/bin/postmaster -D '/tmp/mnt/usb0/part1/caisse/db'
> "root" execution of the PostgreSQL server is not permitted.
It sure looks to me like you got the account creation wrong somehow.
Possibly running "id" here would shed some light on what login state
the postmaster is seeing.
regards, tom lane
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: "root" execution not permitted. and busybox
@ 2010-12-24 00:54 Scott Marlowe <scott.marlowe@gmail.com>
parent: Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 1 reply; 7+ messages in thread
From: Scott Marlowe @ 2010-12-24 00:54 UTC (permalink / raw)
To: Tom Lane <tgl@sss.pgh.pa.us>; +Cc: nbald <nicolas.baldeck@vizille.net>; pgsql-admin
On Thu, Dec 23, 2010 at 3:35 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> nbald <nicolas.baldeck@vizille.net> writes:
>> this is driving me crazy... Do someone have an idea ?
>
>> # echo 'pgsql:pgsql:100:100:pgsql:/home/pgsql:/bin/sh' >> /etc/passwd
>
> That might have been the only way to create a Unix user account back
> around 1972, but it hardly seems like the recommended way now. Doesn't
> your distro provide a tool for that?
Every distro I've used in the last 5 or 10 years has either adduser or
useradd and usermod for this kind of stuff.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: "root" execution not permitted. and busybox
@ 2010-12-24 01:44 Nicolas BALDECK <nicolas.baldeck@vizille.net>
parent: Scott Marlowe <scott.marlowe@gmail.com>
0 siblings, 0 replies; 7+ messages in thread
From: Nicolas BALDECK @ 2010-12-24 01:44 UTC (permalink / raw)
To: Scott Marlowe <scott.marlowe@gmail.com>; +Cc: Tom Lane <tgl@sss.pgh.pa.us>; pgsql-admin
I'm working on an embedded system, and the bundled busybox doesn't
include useradd nor adduser. So I thought that it was faster to create
the user that way instead of setting a toolchain and recompiling busybox...
Scott Marlowe wrote:
> On Thu, Dec 23, 2010 at 3:35 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>
>> nbald <nicolas.baldeck@vizille.net> writes:
>>
>>> this is driving me crazy... Do someone have an idea ?
>>>
>>> # echo 'pgsql:pgsql:100:100:pgsql:/home/pgsql:/bin/sh' >> /etc/passwd
>>>
>> That might have been the only way to create a Unix user account back
>> around 1972, but it hardly seems like the recommended way now. Doesn't
>> your distro provide a tool for that?
>>
>
> Every distro I've used in the last 5 or 10 years has either adduser or
> useradd and usermod for this kind of stuff.
>
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: "root" execution not permitted. and busybox
@ 2010-12-24 02:41 Daniel J. Summers <daniel.summers.2415@gmail.com>
parent: nbald <nicolas.baldeck@vizille.net>
1 sibling, 0 replies; 7+ messages in thread
From: Daniel J. Summers @ 2010-12-24 02:41 UTC (permalink / raw)
To: pgsql-admin
On Thu, Dec 23, 2010 at 3:03 PM, nbald <nicolas.baldeck@vizille.net> wrote:
>
> # echo 'pgsql:pgsql:100:100:pgsql:/home/pgsql:/bin/sh' >> /etc/passwd
> # su - pgsql
> warning: cannot change to home directory
>
That last line seems to be the problem. Does /home/pgsql exist? If it
doesn't, and the su command can't complete, you may still be running as
root.
--
*Daniel J. Summers*
*Owner, DJS Consulting*
E-mail <daniel.summers.2415@gmail.com> • Website <http://djs-consulting.com;
• Support <http://support.djs-consulting.com; • Tech
Blog<http://techblog.djs-consulting.com;
GEEKCODE 3.12 GCS/IT d s-:+ a C++ P--- L++ E--- W++ N++ o? K- w !O M--
V PS+ PE++ Y? PGP- t+ 5? X+ R* tv b+ DI++ D+ G- e<++ h---- r+++ y++++
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: "root" execution not permitted. and busybox
@ 2010-12-27 08:14 Jasen Betts <jasen@xnet.co.nz>
parent: Nicolas BALDECK <nicolas@vizille.net>
0 siblings, 0 replies; 7+ messages in thread
From: Jasen Betts @ 2010-12-27 08:14 UTC (permalink / raw)
To: pgsql-admin
On 2010-12-23, Nicolas BALDECK <nicolas@vizille.net> wrote:
> Hi guys,
> this is driving me crazy... Do someone have an idea ?
run some diagnotsics.
(id -a, ls -l)
maybe install a more complete environment temporarily.
> $ /tmp/mnt/usb0/part1/usr/bin/postmaster -D '/tmp/mnt/usb0/part1/caisse/db'
> "root" execution of the PostgreSQL server is not permitted.
what's the UID at this moment?
what's the file sytem type of /tmp/mnt/usb0/part1/
--
⚂⚃ 100% natural
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2010-12-27 08:14 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2010-12-23 22:03 "root" execution not permitted. and busybox nbald <nicolas.baldeck@vizille.net>
2010-12-23 22:35 ` Tom Lane <tgl@sss.pgh.pa.us>
2010-12-24 00:54 ` Scott Marlowe <scott.marlowe@gmail.com>
2010-12-24 01:44 ` Nicolas BALDECK <nicolas.baldeck@vizille.net>
2010-12-24 02:41 ` Daniel J. Summers <daniel.summers.2415@gmail.com>
2010-12-23 22:05 "root" execution not permitted. and busybox Nicolas BALDECK <nicolas@vizille.net>
2010-12-27 08:14 ` Jasen Betts <jasen@xnet.co.nz>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox