bash: /home/celso/bin/suvts: Permission denied

[celso_suzuki]

Hi,

I upgrade my box from Fedora 16 to Fedora 17.
Now, all my scripts, that runned at F16 is not working ....
Detail, they are in a NFS File system.

sfw3:/home4 /home4 nfs exec,dev,suid,rw,noauto,user 0 0


I already tried remount the FS

mount -o remount,exec /home4

When i execute

bash test.sh it runs.

Any ideia ?

Thanks in advance

Celso Suzuki

[Gareth Jones]

What does "ls -l /home/celso/bin/suvts" actually list the permissions as?

[celso_suzuki]

[celso@sfw06 ~]$ ls -l /home/celso/bin/suvts
lrwxrwxrwx 1 celso celso 6 Set 7 2007 /home/celso/bin/suvts -> CnxRem
[celso@sfw06 ~]$ ls -l /home/celso/bin/CnxRem
-rwxrwxr-x 1 celso celso 3375 Jul 13 2011 /home/celso/bin/CnxRem
[celso@sfw06 ~]$ ls -l /home/celso|grep bin
lrwxrwxrwx. 1 celso celso 16 Jun 3 2011 bin -> /home2/celso/bin
[celso@sfw06 ~]$ ls -l /home2/celso/|grep bin
drwxr-xr-x 2 celso celso 12288 Ago 16 17:00 bin
[celso@sfw06 ~]$ ls -l /|grep home2
drwxr-xr-x 224 root 513 12288 Set 5 09:11 home2
sfw31.dti.digitro.com.br:/home3/ nfs 146561600 137402816 1714496 99% /home2
[celso@sfw06 ~]$ suvts 102
bash: /home/celso/bin/suvts: Permission denied

[celso@sfw06 ~]$ more /home/celso/bin/suvts
#!/bin/bash
# Script geral para conexao remota
# Atende ssh e rlogin
################################################## ########
User=axs
User2=celso
Log=rlogin



[celso@sfw06 bin]$ xx
bash: ./xx: Permissão negada
[celso@sfw06 bin]$ more xx
#!/bin/bash

echo "Teste"

---------- Post added at 11:55 AM ---------- Previous post was at 09:09 AM ----------

in file /etc/fstab

sfw31.dti.digitro.com.br:/home3 /home2 nfs exec,dev,suid,rw,noauto,user 0 0

[george_toolan]

ls -l /bin/bash

and please don't use rlogin for conexao remota!

[celso_suzuki]

[celso@sfw06 SVN]$ ls -l /bin/bash
-rwxr-xr-x 1 root root 902036 Jul 24 05:38 /bin/bash

The bash works.
If I ran the script at local directory, it works.
Only when I ran at NFS FS it didn't work .....

[jpollard]

Having dev,suid on an NFS mount is opening a security hole by allowing other systems to create setuid files (and device references) that are not under the control of the system.

Devices are a bigger problem as they may allow device control that is not allowed by the system.

[celso_suzuki]

Hi,

I found the problem.

I mount the FS with these options exec,dev,suid,rw,noauto,user to let me mount without be root.
I tried to mount manually, as root, and the scripts run. So i tried as my user, and it didn't run.
So I changed the user option to the first option and it works !!

The options are now user,exec,dev,suid,rw,noauto

Strange ...

But it works .....


Thanks every body !!!

[jpollard]

And you still have the security problems with dev and suid

---------- Post added at 09:29 AM ---------- Previous post was at 08:56 AM ----------

FYI: I did a little checking in the manpage for mount:

users  Allow  every  user  to  mount  and unmount the filesystem.  This
              option implies the options noexec,  nosuid,  and  nodev  (unless
              overridden   by  subsequent  options,  as  in  the  option  line
              users,exec,dev,suid).

These defaults are for safety, though frequently the "noexec" is overridden.

[celso_suzuki]

Hi,

Ok, I'll change the line of fstab.

Thanks for the tip.