Re: [OT] sbox error

This WebDNA talk-list message is from

2003


It keeps the original formatting.
numero = 48272
interpreted = N
texte = Cheers AlainThis was a good indicator of where I was going wrong, sbox had the permissions of --x--x--x but it turns out it didn't have the correct username and group either.I managed to get it fixed by having the following permissions etc.---s--x--x 1 root bin 24869 Mar 3 10:55 sboxI thought I would post this just in case anybody else might come across similar issues...Thanks again...Alanon 28/2/03 6:53 pm, Alain Russell at alain.russell@blackpepper.co.nz wrote:> Does the Sbox have setguid privileges ? > what are the permissions .. I just wenth through the same thing with a new > version of Sendmail .. > > turns out the permissions needed to be r-sr-xr-x > the s being for 'setuserid' > > to 'setguid' you need to 'sudo chmod g+s cginamehere' > > HTH > Alain > > >> Hi >> >> Does anyone have experience with a thing called sbox? Here is the >> opening paragraph about it:- >> >> --------- >> sbox is a CGI wrapper script that allows Web site hosting services to >> safely grant CGI authoring privileges to untrusted clients. In addition >> to changing the process privileges of client scripts to match their >> owners, it goes beyond other wrappers by placing configurable ceilings >> on script resource usage, avoiding unintentional (as well as >> intentional) denial of service attacks. It also optionally allows the >> Webmaster to place client's CGI scripts in a chroot'ed shell restricted >> to the author's home directories. --------- >> >> My problem is that this was working on our server and now for some >> reason it isn't and not even the simplest formmail script will run on >> our server :( >> >> I am getting the following error for anyone that might be able to >> help:- >> >> couldn't setgid() to 10000 (Operation not permitted) >> >> I have been in to check my error logs but get nothing different from >> what is stated above. >> >> Hope someone can help... >> >> Kind Regards >> >> Alan >> >> >> ------------------------------------------------------------- >> This message is sent to you because you are subscribed to >> the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to >> Web Archive of this list is >> at: http://webdna.smithmicro.com/ > ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: [OT] sbox error (Alan White 2003)
  2. Re: [OT] sbox error (Alain Russell 2003)
  3. [OT] sbox error (Alan White 2003)
Cheers AlainThis was a good indicator of where I was going wrong, sbox had the permissions of --x--x--x but it turns out it didn't have the correct username and group either.I managed to get it fixed by having the following permissions etc.---s--x--x 1 root bin 24869 Mar 3 10:55 sboxI thought I would post this just in case anybody else might come across similar issues...Thanks again...Alanon 28/2/03 6:53 pm, Alain Russell at alain.russell@blackpepper.co.nz wrote:> Does the Sbox have setguid privileges ? > what are the permissions .. I just wenth through the same thing with a new > version of Sendmail .. > > turns out the permissions needed to be r-sr-xr-x > the s being for 'setuserid' > > to 'setguid' you need to 'sudo chmod g+s cginamehere' > > HTH > Alain > > >> Hi >> >> Does anyone have experience with a thing called sbox? Here is the >> opening paragraph about it:- >> >> --------- >> sbox is a CGI wrapper script that allows Web site hosting services to >> safely grant CGI authoring privileges to untrusted clients. In addition >> to changing the process privileges of client scripts to match their >> owners, it goes beyond other wrappers by placing configurable ceilings >> on script resource usage, avoiding unintentional (as well as >> intentional) denial of service attacks. It also optionally allows the >> Webmaster to place client's CGI scripts in a chroot'ed shell restricted >> to the author's home directories. --------- >> >> My problem is that this was working on our server and now for some >> reason it isn't and not even the simplest formmail script will run on >> our server :( >> >> I am getting the following error for anyone that might be able to >> help:- >> >> couldn't setgid() to 10000 (Operation not permitted) >> >> I have been in to check my error logs but get nothing different from >> what is stated above. >> >> Hope someone can help... >> >> Kind Regards >> >> Alan >> >> >> ------------------------------------------------------------- >> This message is sent to you because you are subscribed to >> the mailing list . >> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to >> Web Archive of this list is >> at: http://webdna.smithmicro.com/ > ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Alan White

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

PCS Customer submissions ? (1997) Root Folder problems cont. (1998) DB approach question (2000) Strange error (2000) same product in cart (1997) WebCatalog for Postcards ? (1997) [WebDNA] =?UTF-8?B?UmU6IFtXZWJETkFdIFJlOiBbV2ViRE5BXSBSZTogW1dlYkROQV0gUmU=?= (2011) Request Time Out (1997) Making a page expire with web catalog? (1999) Details of shipping - Totalqty calculations (1997) Protecting Realms (1998) RE: Error: template (1997) Text data with spaces in them... (1997) What about this [delete] situation? (1998) Odd [math] behavior (2003) RE: OK, here goes... (1997) No more misunderstanding ... yay! :) (1997) Better Stability, Better Performance, Bugs are dead/ Gone (2000) Internet Explorer 6 Form problems (2005) [WebDNA] Crashing again (2008)