Bug#274150: grub: /sbin/grub-{floppy,reboot} are chmod 0754 instead of 0755

Jan Minar Jan Minar <jjminar@fastmail.fm>, 274150@bugs.debian.org
Thu, 30 Sep 2004 01:22:43 +0200


--ZPt4rx8FFjLCG7dd
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Package: grub
Version: 0.95+cvs20040624-8-local-0
Severity: normal

grub-floppy & grub-reboot are only readable by `others'.  I'm not quite
sure what grub-reboot does, but grub-floppy really should be executable:

-rwxr-xr--    1 root     root         2955 Sep 28 02:55 /sbin/grub-floppy
-rwxr-xr--    1 root     root          677 Sep 28 02:55 /sbin/grub-reboot

I managed to:

	$ cp /sbin/grub-floppy .
	$ chmod +x grub-floppy
	$ ./grub-floppy /dev/loop6

without any apparent problems. -- If this is really dangerous, a runtime
check along with:

	test "`id -u`" = 0 || { echo "You *have* to be root, sorry!"; exit 1; }

is a bit ugly, but still better than this permission deficiency.

Making grub-floppy work with normal files would be a real solution --
there is really no need for root privileges whatsoever, theoretically.

Cheers,
--
Jan

--ZPt4rx8FFjLCG7dd
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQFBW0PD+uczK20Fa5cRAnmTAJoD0jEVt3sz5d0zLXI5RJA6IM8vkwCff6wb
9iJN+NT1Jo1fQVMJES04+Os=
=u+NK
-----END PGP SIGNATURE-----

--ZPt4rx8FFjLCG7dd--