hi p.j.,
On 02/09/2014 03:27 AM, Robert P. J. Day wrote:
On Sun, 9 Feb 2014, Ed Greshko wrote:
On 02/09/14 17:07, Robert P. J. Day wrote:
on my f20 system, perusing the account-related commands and ran
across the "groupmems" command, whose man page reads:
"SETUP
The groupmems executable should be in mode 2770 as user root and in group groups. The system administrator can
add users to group groups to allow or disallow them using the groupmems utility to manage their own group
membership list.
$ groupadd -r groups
$ chmod 2770 groupmems
$ chown root.groups groupmems
$ groupmems -g groups -a gk4"
currently, /usr/sbin/groupmems has the following properties:
# ls -l /usr/sbin/groupmems
-rwxr-x---. 1 root root 56960 Jul 26 2013 /usr/sbin/groupmems
#
so how should i interpret the man page? should groupmems be setgid?
or is the man page suggesting how the reader might set it to setgid
for further customization? the way the man page is worded seems
ambiguous.
You should interpret the man page to say.... *If* you want to give
users the ability to administer their own group membership list then
follow the instructions in the "SETUP" section.
By default, this feature is not enable, thus it is not released with
mode 2770 set.
i thought as much, which means that the man page is still
confusingly worded and, IMHO, still merits a BZ report.
pedantically yours,
rday
if you want to be "technickly" correct, something else to consider
for your bz report:
]$ man groupmems
]$
]$ ls -l /usr/sbin/groupmems
-rwxr-x---. 1 root root 49356 Dec 9 2011 /usr/sbin/groupmems*
]$
]$
]$ groupadd -r groups
bash: /usr/sbin/groupadd: Permission denied
]$ su
Password:
]#
]# groupadd -r groups
]# chmod 2770 groupmems
chmod: cannot access `groupmems': No such file or directory
]# chmod 2770 /usr/sbin/groupmems
]# chown root:groups groupmems
chown: cannot access `groupmems': No such file or directory
]# chown root:groups /usr/sbin/groupmems
]# groupmems -g groups -a gk4"
> ^C
]#
]# ls -l /usr/sbin/groupmems
-rwxrwx---. 1 root groups 49356 Dec 9 2011 /usr/sbin/groupmems
]#
note closely the 1st 9 lines and the last 7 lines.
so, _technickly_ the man page "groupmems" is *incorrect*. ;-)
--
peace out.
in a world with out fences, who needs gates.
tc.hago.
g
.
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
