[Pkg-sysvinit-devel] Bug#540008: initscripts: /lib/init/vars.sh permission denied on /proc/cmdline with grsecurity

[Patrick Mevzek]

Package: initscripts
Version: 2.86.ds1-61
Severity: wishlist
Tags: patch

The /lib/init/vars.sh script uses /proc/cdmline which is -r-------- under
a kernel compiled with grsecurity patch in which case any user not root
gets 
egrep: /proc/cmdline: Permission denied
for example /etc/cron.d/sendmail which starts /usr/share/sendmail/sendmail
as smmsp user, and the later script then uses /lib/init/vars.sh

The following change solves the problem:
--- /tmp/vars.sh	2009-08-05 05:44:35.000000000 +0200
+++ /lib/init/vars.sh	2009-08-05 05:44:20.000000000 +0200
@@ -13,7 +13,7 @@
 fi
 
 # Accept the same 'quiet' option as the kernel
-if [ ! -e /proc/cmdline ] || egrep -qw 'quiet' /proc/cmdline ; then
+if [ ! -e /proc/cmdline ] || [ ! -r /proc/cmdline ] || egrep -qw 'quiet' /proc/cmdline ; then
     VERBOSE="no"
 fi
 


-- System Information:
Debian Release: 5.0.2
  APT prefers stable
  APT policy: (500, 'stable'), (50, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.23.1-grsec (SMP w/2 CPU cores)
Locale: LANG=fr_FR.ISO-8859-15 at euro, LC_CTYPE=fr_FR.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages initscripts depends on:
ii  debianutils                  2.30        Miscellaneous utilities specific t
ii  e2fsprogs                    1.41.3-1    ext2/ext3/ext4 file system utiliti
ii  libc6                        2.7-18      GNU C Library: Shared libraries
ii  lsb-base                     3.2-20      Linux Standard Base 3.2 init scrip
ii  mount                        2.13.1.1-1  Tools for mounting and manipulatin
ii  sysvinit-utils               2.86.ds1-61 System-V-like utilities

Versions of packages initscripts recommends:
ii  psmisc                        22.6-1     Utilities that use the proc filesy

initscripts suggests no packages.

-- no debconf information