Bug#274150: grub: /sbin/grub-{floppy,reboot} are chmod 0754 instead of 0755
Jan Minar
Jan Minar <jjminar@fastmail.fm>, 274150@bugs.debian.org
Thu, 30 Sep 2004 01:22:43 +0200
--ZPt4rx8FFjLCG7dd
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Package: grub
Version: 0.95+cvs20040624-8-local-0
Severity: normal
grub-floppy & grub-reboot are only readable by `others'. I'm not quite
sure what grub-reboot does, but grub-floppy really should be executable:
-rwxr-xr-- 1 root root 2955 Sep 28 02:55 /sbin/grub-floppy
-rwxr-xr-- 1 root root 677 Sep 28 02:55 /sbin/grub-reboot
I managed to:
$ cp /sbin/grub-floppy .
$ chmod +x grub-floppy
$ ./grub-floppy /dev/loop6
without any apparent problems. -- If this is really dangerous, a runtime
check along with:
test "`id -u`" = 0 || { echo "You *have* to be root, sorry!"; exit 1; }
is a bit ugly, but still better than this permission deficiency.
Making grub-floppy work with normal files would be a real solution --
there is really no need for root privileges whatsoever, theoretically.
Cheers,
--
Jan
--ZPt4rx8FFjLCG7dd
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQFBW0PD+uczK20Fa5cRAnmTAJoD0jEVt3sz5d0zLXI5RJA6IM8vkwCff6wb
9iJN+NT1Jo1fQVMJES04+Os=
=u+NK
-----END PGP SIGNATURE-----
--ZPt4rx8FFjLCG7dd--