program not setuid / no user in group users ?!? still there

Bug #46995 reported by Michael Heimann
8
Affects Status Importance Assigned to Milestone
davfs2 (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

after setting up a webdav entry in /etc/fstab, with the "user" option, a user cannot(,but should be able to) mount that mountpoint because of the following error message :

/usr/lib/mount.davfs-2.6: Can't get root permissions, maybe program is not setuid

and that is indeed the case
ls -l /usr/lib/mount.davfs-2.6:

-rwxr-xr-x 1 root root 37392 2006-03-27 15:47 /usr/lib/mount.davfs-2.6

should be

-rwsr-sr-x 1 root root 37392 2006-03-27 15:47 /usr/lib/mount.davfs-2.6

or not ?

Additionally the user has to be member of the group users which has no members at least on my pc...

when the user is added to the group users the mount of webDAV shares works

noone done webdav on actual version of Dapper yet ?
I've read about that but it's still not fixed ?!?

description: updated
Revision history for this message
Jason Ribeiro (jrib) wrote :

I am on current edgy and just experienced the same situation.

(jasonr@luso:~)% mount /media/myfiles
/sbin/mount.davfs: Program is not setuid root.

/usr/share/doc/davfs2/README.Debian states:
davfs2 for Debian
------------------

Allowing a normal user to mount webdav resources
------------------------------------------------
If you want to allow non-root users to mount a davfs file system, you have to set a few things:
 - The suid bit for the corresponding binary:
       # chmod u+s /usr/lib/mount.davfs-<your kernel version>
 - Add to the group 'users' all the users that you want to mount dav file systems:
       # addgroup <username> users
 - Add the following line in the /etc/fstab file with the option 'users'
       http://webdav.site.com/path /mnt davfs rw,users,noauto 0 0

which is fine, but "chmod u+s /usr/lib/mount.davfs-<your kernel version>" is not correct. Instead, /sbin/mount.davfs2 should be setuid root.

Jason Ribeiro (jrib)
Changed in davfs2:
status: Unconfirmed → Confirmed
Revision history for this message
Martin Albisetti (beuno) wrote :

I believe this is fixed, can you confirm it?

Changed in davfs2:
status: Confirmed → Needs Info
Revision history for this message
Jason Ribeiro (jrib) wrote :

Yes, the README.Debian file has been updated in feisty and after reading /usr/share/doc/davfs2/README.Debian users should be able to mount with davfs.

There is still a bug where the group is not properly set in /etc/davfs2/davfs2.conf by the ncurses configuration program, but this is a separate bug and is already in another report.

Changed in davfs2:
status: Incomplete → Fix Released
Revision history for this message
oliver (oliver-schinagl) wrote :

Just ran apt-get update and apt-get upgrade on a 13.04 install, /sbin/mount.davfs is not setuid root so users can't ever use dav, even if they are in the davfs2 group.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.