Microsoft setuid binaries won't run in SUA 5.2 (Full Version)

All Forums >> [SFU / Interix / SUA Technology] >> Windows Server 2003 R2 SUA



Message

breiter -> Microsoft setuid binaries won't run in SUA 5.2 (Mar. 9, '06, 3:53:18 AM)

First, yes I did select enable suid when installing the Utilities and SDK. Furthermore, I checked the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SUA EnableSetuidBinaries = REG_DWORD 0x00000001.

I noticed this because I couln't run crontab(1). Then I realized that cron wasn't running.

From /var/adm/log/init.log

Running /bin/sh /etc/rc2.d/S38cron start >> /var/adm/log/init.log 2>&1
/etc/rc2.d/S38cron[26]: /usr/sbin/cron: Operation not permitted
Exitstatus = 0 (Success)

% whoami
Administrator
% crontab -p
/bin/crontab: Operation not permitted.

All of these binaries refuse to run.

-rwsrwxr-x 1 root +Administrators 162816 Jan 6 12:01 at
-rwsrwxr-x 1 root +Administrators 162816 Jan 6 12:01 atq
-rwsrwxr-x 1 root +Administrators 162816 Jan 6 12:01 atrm
-rwsrwxr-x 1 root +Administrators 162816 Jan 6 12:01 batch
-rwsrwxr-x 1 root +Administrators 181760 Jan 6 12:01 crontab
-rwsrwxr-x 1 root +Administrators 91648 Jan 6 12:01 newgrp
-rwsrwxr-x 1 root +Administrators 99328 Jan 6 12:01 regpwd

If EnableSetuidBinaries is set to 0, then I get a specific message that setuid binaries are not enabled. But that isn't the issue and my error message is just a generic access denied.

It appears to systematically be setuid binaries from Microsoft that don't run. Interopsystems setuid binaries are fine.



breiter -> RE: Microsoft setuid binaries won't run in SUA 5.2 (Mar. 9, '06, 10:39:57 AM)

FYI. I have opened a support case with Microsoft for this issue and will report back what I learn.



breiter -> RE: Microsoft setuid binaries won't run in SUA 5.2 (Mar. 9, '06, 4:27:57 PM)

Here's an update. The product support engineer was able to reproduce the issue with setuid binaries not running. He had a fix that worked in his environment but not for me. The fix to try is to remove and re-add the setuid bit.

% chmod u-s /bin/at
% chmod u+s /bin/at

You have to do this for each affected binary. In the test environment at Microsoft, this fixed the issue. It doesn't do anything for me, unfortunately.

One interesting tidbit is that the binaries will run if the setuid bit is removed, so it is clearly something to do with setuid.



Page: [1]



Forum Software © ASPPlayground.NET Advanced Edition 2.5 ANSI

0.016