2011-09-19 10:13:18 |
Numérigraphe |
bug |
|
|
added bug |
2011-09-19 10:14:19 |
Numérigraphe |
bug |
|
|
added subscriber Canonical Partner Developers |
2011-09-19 10:14:58 |
Numérigraphe |
summary |
Wrong owner on symlink make administrative instance fail to start |
Wrong owner on symlink make IBM DB2's administrative instance fail to start |
|
2011-09-19 13:43:20 |
Numérigraphe |
summary |
Wrong owner on symlink make IBM DB2's administrative instance fail to start |
Wrong owner on symlinks make IBM DB2's administrative fail |
|
2011-09-19 13:46:51 |
Numérigraphe |
description |
On db2exc 9.7.4-0lucid3, the init script tries to start the administration instance by:
- su-ing to the admin instance user
- calling "db2admin", which is in ~/das/bin/db2admin, which is in the PATH
This fails with the message "-su: das/bin/db2admin: Permission denied".
Calling /opt/ibm/db2/V9.7/das/bin/db2admin does not fail.
My guess is that it's because:
- ~/das/bin is a symbolic link owned by root
- but ~/das has the sticky bit, so only root can follow the symbolic link
Possible fixes :
- install the symbolic link with the instance admin user as owner
- OR calling /opt/ibm/db2/V9.7/das/bin/db2admin in the init script
- OR adding /opt/ibm/db2/V9.7/das/bin/db2admin to the PATH for the admin instance user
Lionel Sausin |
On db2exc 9.7.4-0lucid3, the init script tries to start the administration instance by:
- su-ing to the admin instance user
- calling "db2admin", which is in ~/das/bin/db2admin, which is in the PATH
This fails with the message "-su: das/bin/db2admin: Permission denied".
Calling /opt/ibm/db2/V9.7/das/bin/db2admin does not fail.
The kernel log reports "non-matching-uid symlink following attempted in sticky world-writable directory".
I think it's because:
- ~/das/bin is a symbolic link owned by root
- but ~/das has the sticky bit, so only root can follow the symbolic link
The same problem exists for several other symbolic links in ~/das/: conv function java lib msg
So maybe the whole administration instance is not installed using the right UID ?
Lionel Sausin |
|
2011-10-19 20:54:05 |
Launchpad Janitor |
db2exc (Ubuntu): status |
New |
Confirmed |
|
2011-10-19 20:54:28 |
Øystein Gisnås |
bug |
|
|
added subscriber Øystein Gisnås |
2011-10-20 07:10:04 |
Numérigraphe |
summary |
Wrong owner on symlinks make IBM DB2's administrative fail |
Wrong owner on symlinks make IBM DB2's administrative server fail |
|
2012-02-23 01:35:52 |
Kees Cook |
db2exc (Ubuntu): status |
Confirmed |
Invalid |
|
2012-07-19 14:46:19 |
KWAndi |
db2exc (Ubuntu): status |
Invalid |
Confirmed |
|
2014-04-14 14:03:44 |
Lionel Sausin - Initiatives/Numérigraphe |
bug |
|
|
added subscriber Lionel Sausin - Numérigraphe |
2014-04-14 14:03:49 |
Numérigraphe |
removed subscriber Numérigraphe |
|
|
|
2015-12-23 15:50:46 |
Øystein Gisnås |
removed subscriber Øystein Gisnås |
|
|
|