Bug 1054609

Summary:	shadow: setuid missing for the newgidmap and newuidmap binaries
Product:	[openSUSE] openSUSE Distribution	Reporter:	Markos Chandras <mchandras>
Component:	Basesystem	Assignee:	Michael Vetter <mvetter>
Status:	RESOLVED DUPLICATE	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	astieger
Version:	Leap 42.3
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Markos Chandras 2017-08-19 17:49:55 UTC

Hi,

newgidmap and newuidmap need to be setuid for lxc-2.X.X to work otherwise the following error occurs

lxc-start 20170819174900.535 DEBUG    lxc_conf - conf.c:lxc_map_ids:3377 - Either one or both of the newuidmap and newgidmap binaries do not exist or are missing necessary privilege.

changing the filemode to 4755 fixes the problem

Comment 1 Michael Vetter 2017-09-12 11:56:52 UTC

Same report for TW: https://bugzilla.suse.com/show_bug.cgi?id=1048645

Comment 3 Andreas Stieger 2017-09-14 08:45:51 UTC

Making these two commands from the shadow package as setuid root via maintenance update would of require the same fixes to be backported to the shadow package in SUSE:SLE-12-SP2:Update. Since SLE does not ship lxc, and there is a local solution (setting it setuid root and using permissions.local), there is no pressing need for a maintenance update IMHO.

Resolving as duplicate of bug 1048645.

*** This bug has been marked as a duplicate of bug 1048645 ***