[brandz-discuss] Can't get a non-root shell (lx_brand.so.1: not found./bin/bash: Permission.
Edward Pilatowicz
edward.pilatowicz at sun.com
Tue Mar 25 13:14:31 PDT 2008
hey david,
so i just filed:
6679851 lx brand install is broken if root umak is not 022
http://bugs.opensolaris.org/view_bug.do?bug_id=6679851
(the link won't work till this bug get's pushed out to b.os.o)
thanks for reporting this issue,
ed
On Tue, Mar 25, 2008 at 12:45:04PM -0700, David W. Smith wrote:
>
> 0077 -- I think this probably explains it...
>
> David
>
>
> On Tue, 2008-03-25 at 12:33 -0700, Edward Pilatowicz wrote:
> > hey david,
> > what the umask(1) command, run as root in the global zone, report?
> > thanks
> > ed
> >
> > On Tue, Mar 25, 2008 at 09:44:51AM -0700, David W. Smith wrote:
> > > William,
> > >
> > > Yes, you were correct. The permissions were not correct.
> > >
> > > # ls -l
> > > total 59
> > > -rw-r--r-- 1 root root 1795 Mar 15 2004
> > > RPM-GPG-KEY-CentOS-3
> > > drwxr-xr-x 3 root root 512 Mar 21 23:06 admin
> > > drwxr-xr-x 2 root root 2048 Apr 12 2006 bin
> > > drwxr-xr-x 3 root root 512 Apr 12 2006 boot
> > > drwxr-xr-x 3 root root 512 Mar 21 23:35 dev
> > > drwxr-xr-x 63 root root 4608 Mar 21 23:35 etc
> > > drwxr-xr-x 10 root root 3072 Mar 21 22:43 lib
> > > drwx------ 2 root root 512 Mar 21 22:43 mnt
> > > drwx------ 9 root root 512 Mar 21 22:43 native
> > > drwx------ 2 root root 512 Mar 21 22:43 opt
> > > dr-xr-xr-x 82 root root 1312 Mar 21 23:35 proc
> > > drwxr-xr-x 8 root root 512 Mar 21 23:34 root
> > > drwxr-xr-x 2 root root 5632 Mar 21 22:43 sbin
> > > drwxrwxrwt 4 root root 512 Mar 25 17:01 tmp
> > > drwxr-xr-x 14 root root 512 Apr 12 2006 usr
> > > drwxr-xr-x 22 root root 512 Nov 2 2005 var
> > >
> > >
> > > I don't know how they got set to be too restrictive, but after
> > > I reset them everything seems better now.
> > >
> > > Thanks for your help.
> > >
> > > David
> > >
> > > On Tue, 2008-03-25 at 17:30 +0100, William Roche wrote:
> > > > Hello David,
> > > >
> > > > This really looks like bad access bits mask set on some directories.
> > > >
> > > > I would go for an inaccessible /native/usr/lib in your branded zone.
> > > >
> > > > --> Are you sure a non-root user can access the
> > > > /native/usr/lib/lx_brand.so.1 file ?
> > > > And/or the /native/usr/lib directory and/or the /native/usr directory
> > > > and/or the /native directory and/or the / directory, in you branded zone ?
> > > >
> > > > A "native" directory with these access bits results in the same problem
> > > > as you described.
> > > >
> > > > drwxr-x--- 9 root root 512 Feb 8 05:37 native
> > > >
> > > > You probably changed it manually or ran a bad script doing so.
> > > >
> > > > HTH,
> > > >
> > > > Cheers,
> > > > William.
> > > >
> > > >
> > > > David Smith wrote:
> > > > > I'm sure this is something really simple, but I can't seem to get a non-root shell.
> > > > >
> > > > > # ssh dwsmith at bimini
> > > > > dwsmith at bimini's password:
> > > > > Welcome to your shiny new Linux zone.
> > > > >
> > > > > - This message is in /etc/motd. Feel free to change it.
> > > > >
> > > > > For anything more complicated, see:
> > > > > http://opensolaris.org/os/community/brandz/
> > > > >
> > > > > lx_brand.so.1: not found./bin/bash: Permission denied
> > > > >
> > > > > Or if I zlogin, then try to su, I get a the same issue:
> > > > >
> > > > > -bash-2.05b# uname -a
> > > > > Linux bimini 2.4.21 BrandZ fake linux i686 athlon i386 GNU/Linux
> > > > > -bash-2.05b# su - dwsmith
> > > > > lx_brand.so.1: not found.su: /bin/bash: Permission denied
> > > > >
> > > > > I'm running S10U4 on an x4100, with Centos installed from the tar ball image from
> > > > > this site for the lx zone.
> > > > >
> > > > > Hopefully this is a simple configuration issue...
> > > > >
> > > > > Thanks,
> > > > >
> > > > > David
> > > > >
> > > > >
> > > > > This message posted from opensolaris.org
> > > > > _______________________________________________
> > > > > brandz-discuss mailing list
> > > > > brandz-discuss at opensolaris.org
> > > > >
> > > _______________________________________________
> > > brandz-discuss mailing list
> > > brandz-discuss at opensolaris.org
More information about the brandz-discuss
mailing list