From owner-freebsd-security@FreeBSD.ORG  Sun Jan 14 06:49:42 2007
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 6124A16A894
	for <freebsd-security@freebsd.org>;
	Sun, 14 Jan 2007 06:49:42 +0000 (UTC) (envelope-from drosih@rpi.edu)
Received: from smtp6.server.rpi.edu (smtp6.server.rpi.edu [128.113.2.226])
	by mx1.freebsd.org (Postfix) with ESMTP id 05DB213C725
	for <freebsd-security@freebsd.org>;
	Sun, 14 Jan 2007 06:23:25 +0000 (UTC) (envelope-from drosih@rpi.edu)
Received: from [128.113.24.47] (gilead.netel.rpi.edu [128.113.24.47])
	by smtp6.server.rpi.edu (8.13.1/8.13.1) with ESMTP id l0E5GYlg004362;
	Sun, 14 Jan 2007 00:16:35 -0500
Mime-Version: 1.0
Message-Id: <p0624080ac1cf6d08f32a@[128.113.24.47]>
In-Reply-To: <17832.37104.392873.671721@roam.psg.com>
References: <17832.37104.392873.671721@roam.psg.com>
Date: Sun, 14 Jan 2007 00:16:33 -0500
To: Randy Bush <randy@psg.com>, freebsd-security@freebsd.org
From: Garance A Drosihn <drosih@rpi.edu>
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
X-CanItPRO-Stream: default
X-RPI-SA-Score: undef - spam-scanning disabled
X-Scanned-By: CanIt (www . canit . ca)
Cc: 
Subject: Re: Permission denied by op
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 14 Jan 2007 06:49:42 -0000

At 9:57 PM -1000 1/12/07, Randy Bush wrote:
>i am invoking op from a python proggy which does an op.system() of
>
>    op chmod 640 /usr/local/etc/tac_plus.conf
>
>i get "Permission denied by op"
>
>% ls -l /usr/local/etc/op.access
>-r--------  1 root  wheel  149 Jan 13 07:41 /usr/local/etc/op.access

Try a:  ls -lo /usr/local/etc/op.access

and see if some of the chflags-style options have been turned on.

-- 
Garance Alistair Drosehn            =   gad@gilead.netel.rpi.edu
Senior Systems Programmer           or  gad@freebsd.org
Rensselaer Polytechnic Institute    or  drosih@rpi.edu