Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-43986

Normal user can't run the oc-mirror command

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • 4.18
    • oc-mirror
    • Moderate
    • None
    • Proposed
    • False
    • Hide

      None

      Show
      None
    • Hide
      *Cause*: What actions or circumstances cause this bug to present.
      *Consequence*: What happens when the bug presents.
      *Fix*: What was done to fix the bug.
      *Result*: Bug doesn’t present anymore.
      Show
      *Cause*: What actions or circumstances cause this bug to present. *Consequence*: What happens when the bug presents. *Fix*: What was done to fix the bug. *Result*: Bug doesn’t present anymore.
    • Bug Fix
    • In Progress

      Description of problem:

      Normal use failed to run the oc-mirror command with permission denied

      Version-Release number of selected component (if applicable):

      ./oc-mirror.rhel8  version 
      WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version.
      Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.18.0-202410251041.p0.g95f0611.assembly.stream.el9-95f0611", GitCommit:"95f0611c1dc9584a4a9e857912b9eaa539234bbc", GitTreeState:"clean", BuildDate:"2024-10-25T11:28:19Z", GoVersion:"go1.22.7 (Red Hat 1.22.7-1.module+el8.10.0+22325+dc584f75) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}

      How reproducible:

           Always
          

      Steps to Reproduce:

      1. download latest oc-mirror from 4.18 payload;
      2. use `adduser` and `passwd` to add a new system user;
      3. switch to new user, run oc-mirror command

       

      Actual results:

      3. hit privilege issue for normal user:
      ./oc-mirror.rhel8 version 
      ERRO[0000] opening /proc/1411217/setgroups: open /proc/1411217/setgroups: permission denied 
      ERRO[0000] (Unable to determine exit status)            
      Error: error opening setgroups: open /proc/1411217/setgroups: permission denied

      Expected results:

      3. no permission issue.

      Additional info:

      compared with 4.17 oc-mirror, no such issue : 
      
      [yinzhou@preserve-fedora-yinzhou tmp]$ ./oc-mirror.rhel8 version 
      WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version.
      Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.17.0-202410241236.p0.g07714b7.assembly.stream.el9-07714b7", GitCommit:"07714b7c836ec3ad1b776f25b44c3b2c2f083aa2", GitTreeState:"clean", BuildDate:"2024-10-25T04:45:05Z", GoVersion:"go1.22.7 (Red Hat 1.22.7-1.module+el8.10.0+22325+dc584f75) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}
      
      
      [yinzhou@preserve-fedora-yinzhou tmp]$ ./oc-mirror.rhel8.18 version 
      Error: error opening setgroups: open /proc/362007/setgroups: permission denied
      ERRO[0000] opening /proc/362007/setgroups: open /proc/362007/setgroups: permission denied
        

       

            luzuccar@redhat.com Luigi Mario Zuccarelli
            yinzhou@redhat.com ying zhou
            ying zhou ying zhou
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: