[Cvs-cvs] setuid failed: Operation not permitted

[Michael Sullivan]

This was copied and pasted from the Gentoo forums, where it has been
sitting for a week with plenty of views, but no help whatsoever:

I have a programming project stored on a CVS server on my LAN. A few
months ago I had to completely reinstall the Gentoo system on that
machine. I hadn't worked on the project since before that, but I
restored the backups I had of /etc, /home, and the /var/lib/cvsd.
Anyway, this was, as I said, a few months ago. The cvs server is
running. I can log in. I just can't check out the project:

address@hidden ~ $ cvs login
Logging in to :pserver:address@hidden:2401/root
CVS password:
address@hidden ~ $ cvs checkout ourrpg
setuid failed: Operation not permitted
address@hidden ~ $


I cannot figure this out! Here's my config:

carter ~ # cat /etc/cvsd/cvsd.conf

RootJail /var/lib/cvsd
Uid cvsd
Gid cvsd
Nice 1
Umask 027
Limit coredumpsize 0
PidFile /var/run/cvsd.pid
Listen 192.168.2.2:2401
MaxConnections 10
Log syslog info
Repos /root

carter ~ # grep cvsd /var/log/messages
Sep 26 09:28:30 carter cvsd[13392]: connection from 192.168.2.3 48060
Sep 26 09:28:30 carter cvsd[13392]: cvs command exited with exit-status 1
Sep 26 09:28:36 carter cvsd[13392]: connection from 192.168.2.3 48061
Sep 26 09:28:36 carter cvsd[13392]: cvs command exited with exit-status 0
Sep 26 09:28:45 carter cvsd[13392]: connection from 192.168.2.3 48062
Sep 26 09:28:45 carter cvsd[13392]: cvs command exited with exit-status 1
Sep 26 10:15:21 carter cvsd[13392]: connection from 192.168.2.3 48152
Sep 26 10:15:21 carter cvsd[13392]: cvs command exited with exit-status 1
Sep 26 10:19:45 carter cvsd[13392]: connection from 192.168.2.3 48153
Sep 26 10:19:45 carter cvsd[13392]: cvs command exited with exit-status 1
Sep 26 10:20:33 carter gpasswd[13860]: user michael added by root to
group cvsd
Sep 26 10:21:06 carter cvsd[13392]: connection from 192.168.2.3 48154
Sep 26 10:21:06 carter cvsd[13392]: cvs command exited with exit-status 1
Sep 26 10:36:37 carter distccd[13055]: (dcc_job_summary) client:
192.168.2.2:46302 COMPILE_OK exit:0 sig:0 core:0 ret:0 time:290ms
i686-pc-linux-gnu-gcc cvsd.c
Sep 26 10:39:08 carter cvsd[13392]: caught signal SIGTERM (15), shutting
down
Sep 26 10:39:08 carter cvsd[13392]: version 1.0.7 bailing out
Sep 26 10:39:08 carter cvsd[4014]: version 1.0.7 starting
Sep 26 10:39:08 carter cvsd[4014]: listening on 192.168.2.2 2401
Sep 26 10:39:08 carter cvsd[4014]: accepting connections
Sep 26 10:39:18 carter cvsd[4014]: connection from 192.168.2.3 48478
Sep 26 10:39:18 carter cvsd[4014]: cvs command exited with exit-status 1
Sep 26 10:39:22 carter cvsd[4014]: connection from 192.168.2.3 48479
Sep 26 10:39:22 carter cvsd[4014]: cvs command exited with exit-status 0
Sep 26 10:39:28 carter cvsd[4014]: connection from 192.168.2.3 48480
Sep 26 10:39:28 carter cvsd[4014]: cvs command exited with exit-status 1
Sep 26 10:40:45 carter cvsd[4014]: caught signal SIGTERM (15), shutting down
Sep 26 10:40:45 carter cvsd[4014]: version 1.0.7 bailing out
Sep 26 10:40:45 carter cvsd[4076]: version 1.0.7 starting
Sep 26 10:40:45 carter cvsd[4076]: listening on 192.168.2.2 2401
Sep 26 10:40:45 carter cvsd[4076]: accepting connections
Sep 26 10:40:52 carter cvsd[4076]: connection from 192.168.2.3 48482
Sep 26 10:40:52 carter cvsd[4076]: cvs command exited with exit-status 1
Sep 26 11:51:37 carter cvsd[4076]: connection from 192.168.2.3 48488
Sep 26 11:51:37 carter cvsd[4076]: cvs command exited with exit-status 1
Sep 26 11:57:21 carter gpasswd[4623]: user michael added by root to
group cvsd
Sep 26 11:58:07 carter cvsd[4076]: connection from 192.168.2.2 50133
Sep 26 11:58:07 carter cvsd[4076]: cvs command exited with exit-status 0
Sep 26 11:58:18 carter cvsd[4076]: connection from 192.168.2.2 50134
Sep 26 11:58:18 carter cvsd[4076]: cvs command exited with exit-status 1
Sep 26 13:15:58 carter cvsd[4076]: connection from 192.168.2.3 48823
Sep 26 13:15:58 carter cvsd[4076]: cvs command exited with exit-status 0
Sep 26 13:16:06 carter cvsd[4076]: connection from 192.168.2.3 48824
Sep 26 13:16:06 carter cvsd[4076]: cvs command exited with exit-status 1

If there is any other information I can provide to help diagnose this
problem, please tell me...

Some more data:

carter ourrpg # /etc/init.d/cvsd stop
* Stopping cvsd ... [ ok ]
carter ourrpg # cvsd -d
cvsd: debug: reading config file (/etc/cvsd/cvsd.conf)
cvsd: debug: done reading config file
cvsd: debug: cvscmd: /bin/cvs
cvsd: debug: cvsargs[0]: cvs
cvsd: debug: cvsargs[1]: -f
cvsd: debug: cvsargs[2]: --allow-root=/root
cvsd: debug: cvsargs[3]: pserver
cvsd: debug: cvsenv[0]: HOME=/
cvsd: debug: cvsenv[1]: PATH=/bin
cvsd: debug: cvsenv[2]: SHELL=/bin/sh
cvsd: debug: cvsenv[3]: TMPDIR=/tmp
cvsd: debug: cvsenv[4]: CVSUMASK=027
cvsd: version 1.0.7 starting
cvsd: debug: binding 192.168.2.2 2401 family=2 socktype=1 protocol=6
cvsd: listening on 192.168.2.2 2401
cvsd: debug: chroot(/var/lib/cvsd) done
cvsd: debug: nice(1) done
cvsd: debug: setgroups(0,NULL) done
cvsd: debug: setgid(1022) done
cvsd: debug: setuid(106) done
cvsd: debug: cvs command to execute: '/bin/cvs -f --allow-root=/root
pserver'
cvsd: accepting connections
cvsd: connection from 192.168.2.3 49176
cvsd: debug: fork() succeeded (child pid=6032)
cvsd: debug: limit coredumpsize to 0(soft) and 0(hard)
cvsd: debug: select() failed (ignored): Interrupted system call
cvsd: cvs command exited with exit-status 0
cvsd: connection from 192.168.2.3 49178
cvsd: debug: fork() succeeded (child pid=6040)
cvsd: debug: limit coredumpsize to 0(soft) and 0(hard)
cvsd: debug: select() failed (ignored): Interrupted system call
cvsd: cvs command exited with exit-status 1

address@hidden ~ $ cvs login
Logging in to :pserver:address@hidden:2401/root
CVS password:
address@hidden ~ $ cvs checkout ourrpg
setuid failed: Operation not permitted

I commented out the RootJail line in cvsd.conf and now whenever I try to
log in (or do anything with the cvs client) I get:

address@hidden ~ $ cvs login
Logging in to :pserver:address@hidden:2401/root
CVS password:
cvs [login aborted]: unrecognized auth response from
carter.espersunited.com: cvs: cannot open /root/CVSROOT/config:
Permission denied

carter ~ # ls -l /var/lib/cvsd/root/CVSROOT/config
-rwxrwxr-x 1 cvsd cvsd 4082 Sep 26 10:38 /var/lib/cvsd/root/CVSROOT/config

Those permissions SHOULD be correct, shouldn't they? I start the server
with /etc/init.d/cvsd start/restart, so it's running as user cvsd...

Is anybody on this list willing to offer ANYTHING that may help resolve
this problem?  Or else at least tell me how I can get a clean copy of my
files from carter:/var/lib/cvsd/root?