DSM-G600, DNS-3xx and NSA-220 Hack Forum

Unfortunately no one can be told what fun_plug is - you have to see it for yourself.

You are not logged in.

Announcement

#1 2008-10-13 04:11:09

puterboy
Member
Registered: 2008-09-18
Posts: 306

Can upgrade process be "fixed" to preserve status of services?

I just upgraded a number of packages (including openssh) and found myself locked out of funplug.
It took me a while to realize that the cause was that the upgraded openssh  package overwrote /ffp/start/sshd.sh, thereby changing it's mode back to 644.

So, would it make sense to add some logic to funpkg to preserve the executability state of files in /ffp/start when doing upgrades?

Offline

 

#2 2008-10-13 10:20:14

fonz
Member / Developer
From: Berlin
Registered: 2007-02-06
Posts: 1716
Website

Re: Can upgrade process be "fixed" to preserve status of services?

puterboy wrote:

So, would it make sense to add some logic to funpkg to preserve the executability state of files in /ffp/start when doing upgrades?

Yes, it's on my todo-list. For critical stuff, like ssh or telnet, you can also add chmod to /ffp/etc/fun_plug.local.

Offline

 

#3 2008-10-13 16:13:09

puterboy
Member
Registered: 2008-09-18
Posts: 306

Re: Can upgrade process be "fixed" to preserve status of services?

That's a good idea - I will do so

Offline

 

#4 2008-10-13 18:01:36

puterboy
Member
Registered: 2008-09-18
Posts: 306

Re: Can upgrade process be "fixed" to preserve status of services?

Another problem that I just discovered inadvertently is that upgrading ffp-base (or busybox) leaves telnet on in the default no password required state -- which means that anyone has automatic root access to telnet even if they think that they had shut off the service or commented out the line:
telnetd_flags="-l /ffp/bin/sh"

Maybe it would be best to at least not have the default be an open root access telnet in the upgraded packages.
Again, I know that I can "solve" this (temporarily) using fun_plug.local...

Offline

 

#5 2008-10-13 18:23:24

fonz
Member / Developer
From: Berlin
Registered: 2007-02-06
Posts: 1716
Website

Re: Can upgrade process be "fixed" to preserve status of services?

puterboy wrote:

Maybe it would be best to at least not have the default be an open root access telnet in the upgraded packages.
Again, I know that I can "solve" this (temporarily) using fun_plug.local...

Yes, and the solution is to not overwrite telnetd.sh on package upgrade. Not overwriting it will also preserve the file permission bits.

Offline

 

Board footer

Powered by PunBB
© Copyright 2002–2010 PunBB