Samba: /etc/sudoers.d/ctdb: bad permissions, should be mode 0440

Manjaro stable with 5.15.12-1-MANJARO

CTDB - clustered TDB database

-c to check

$ sudo visudo -c

/etc/sudoers: parsed OK
/etc/sudoers.d/10-installer: parsed OK
/etc/sudoers.d/ctdb: bad permissions, should be mode 0440
/etc/sudoers.d/zfs: parsed OK

$ stat /etc/sudoers.d/ctdb

File: /etc/sudoers.d/ctdb
Size: 100 Blocks: 8 IO Block: 4096 regular file
Device: 254,0 Inode: 1313102 Links: 1
Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root)
Modify: 2021-12-12 16:59:40.000000000 +0100

is this something that should be fixed in Manjaro? If so where to report this so it can be fixed for everyone?

This is the only file default present on Manjaro installations.

This is the reason why one should only use visudo to modify such files.

There is no ctdb package so you are using a third party - poorly written - PKGBUILD.

Consult the author.

I stand corrected

1 Like

This file is part of the samba package.

The Arch PKGBUILD explicitly sets the permissions like this.
svntogit-packages/PKGBUILD at packages/samba · archlinux/svntogit-packages · GitHub

1 Like

Upstream Arch packages FS#69114 : [samba] 4.13.3-2 visudo reports incorrect permissions (archlinux.org) issue.

patch from issue attachment.

200c200
<   chmod 600 ${pkgdir}/etc/sudoers.d/ctdb
---
>   chmod 400 ${pkgdir}/etc/sudoers.d/ctdb

2 Likes

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.