Re: segfaults on dhcp?

[Harald Hannelius]

Harald Hannelius <harald@arcada.fi> wrote in gnu.cfengine.help:

> Why does cfservd insist on opening /lib/libdb-3.1.so when clearly it's
> linked against /usr/local/lib/libdb* ?

Ok, I got it working now.
  
Here's how I configured db-4.1.24:
  
../dist/configure --with-uniquename
  
And here's the config line for cfengine-2.0.5pre2:
  
CFLAGS="-ldb-4" ./configure
  
Now cfservd starts...
  

Anyone heard about a HOWTO that would be a little less elaborative than the
Tutorial?

-- 
A: Top Posters
Q: What is the most annoying thing on mailing lists? 

Harald H Hannelius | harald/a\arcada.fi      | GSM +358 50 594 1020 (NEW)
>From nate@campin.net Fri Dec 13 23:39:03 2002
Received: from list by monty-python.gnu.org with tmda-scanned (Exim 4.10.13)
        id 18N44t-00034l-00
        for help-cfengine@gnu.org; Fri, 13 Dec 2002 23:39:03 -0500
Received: from mail by monty-python.gnu.org with spam-scanned (Exim 4.10.13)
        id 18N44p-0002xn-00
        for help-cfengine@gnu.org; Fri, 13 Dec 2002 23:39:01 -0500
Received: from skitzo.campin.net ([209.209.45.48])
        by monty-python.gnu.org with esmtp (Exim 4.10.13)
        id 18N44o-0002pq-00
        for help-cfengine@gnu.org; Fri, 13 Dec 2002 23:38:59 -0500
Received: by skitzo.campin.net (Postfix, from userid 1000)
        id 422DC1B059; Fri, 13 Dec 2002 20:38:55 -0800 (PST)
Date: Fri, 13 Dec 2002 20:38:55 -0800
From: Nate Campi <nate@campin.net>
To: help-cfengine@gnu.org
Message-ID: <20021214043855.GG27064@campin.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
        protocol="application/pgp-signature"; boundary="OZkY3AIuv2LYvjdk"
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
X-Editor: VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Apr 14 2002 20:39:56)
X-Anti-Outlook-Page: http://www.rodos.net/outlook/
X-PGP-Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC17AEF79
X-Url: http://www.campin.net
X-message-flag: Outlook: A program to spread viri, but it can do mail too.
Subject: modify root-owned SUID files?
X-BeenThere: help-cfengine@gnu.org
X-Mailman-Version: 2.1b5
Precedence: list
List-Id: Users list for GNU cfengine  <help-cfengine.gnu.org>
List-Help: <mailto:help-cfengine-request@gnu.org?subject=help>
List-Post: <mailto:help-cfengine@gnu.org>
List-Subscribe: <http://mail.gnu.org/mailman/listinfo/help-cfengine>,
        <mailto:help-cfengine-request@gnu.org?subject=subscribe>
List-Archive: <http://mail.gnu.org/pipermail/help-cfengine>
List-Unsubscribe: <http://mail.gnu.org/mailman/listinfo/help-cfengine>,
        <mailto:help-cfengine-request@gnu.org?subject=unsubscribe>
X-List-Received-Date: Sat, 14 Dec 2002 04:39:05 -0000


--OZkY3AIuv2LYvjdk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I'm looking to remove the SUID bit from most root-owned files, but not
all. So far I have this:

        solaris::
        /usr/bin
                        mode=3Du-s
                        exclude=3Dat
                        exclude=3Datq
                        exclude=3Datrm
                        exclude=3Dcrontab
                        exclude=3Dpasswd
                        exclude=3Dsu
                        exclude=3Dnispasswd
                        exclude=3Dyppasswd
                        recurse=3Dinf
                        action=3Dfixall
                        inform=3Dtrue

        /usr/sbin
                        mode=3Du-s
                        recurse=3Dinf
                        exclude=3Dtraceroute
                        action=3Dfixall
                        inform=3Dtrue

This is pretty much what I'm after, but strictly speaking I don't really
mind if the uucp-related programs are SUID and owned by the "uucp" user.

Is there a way to catch only the root-owned SUID programs? I can live
with it this way, but would like to know if I'm missing something.

TIA
--=20
Nate Campi   http://www.campin.net=20

"Trying to outsmart a compiler defeats much of the purpose of using
one."    - Kernighan & Plauger, The Elements of Programming Style.=20


--OZkY3AIuv2LYvjdk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9+rXfWpDEZMF673kRAqOOAJwLx88UcYSLH/ak/Rjgyyjnp96h/ACfS2ed
Q5mWFY0fOr1OFRfGQttmjJI=
=MeMR
-----END PGP SIGNATURE-----

--OZkY3AIuv2LYvjdk--