[NBLUG/talk] yama: non-matching-uid symlink following attempted

[gandalf at sonic.net]

Ok, after being logged off for a bit all of my ones have disappeared. 
Perhaps that will self correct the issue. The last dmsg was over an hour 
ago.


On 2015-09-02 15:20, Steve S. wrote:
> I'd presume, for a first stab, that "BrowserBlocking" is a
> web-oriented service; quick googling suggests Chromium uses it.
> "sticky world-writable directory" suggests a tmp directory, used by
> said service.
> 
> If you are one of the UID's, and your symlinks are all to printers...
> is it possible that someone else is trying to print from their
> browser, and somehow trying to use your link?
> 
> On Wed, Sep 2, 2015 at 2:31 PM,  <gandalf at sonic.net> wrote:
>> BrowserBlocking does not appeare to be a user. There are 33 users 
>> logged on
>> currently. Perhaps I could trace the fsuids?
>> 
>> 
>> 
>> On 2015-09-02 14:24, Omar Eljumaily wrote:
>>> 
>>> Can you look at the files that those users should have access to,
>>> perhaps home directories, and see what's going on there?
>>> 
>>> Does the message appear with different user ids or are they all only 
>>> those
>>> 2?
>>> 
>>> Is BrowserBlocking the username?
>>> 
>>> 
>>> On 9/2/2015 12:26 PM, gandalf at sonic.net wrote:
>>>> 
>>>> I'm wondering where the link is to be able to look at it. This 
>>>> warning
>>>> message doesn't appear to have much help.
>>>> 
>>>> On 2015-09-02 12:12, steve wrote:
>>>>> 
>>>>> On 09/02/2015 11:59 AM, gandalf at sonic.net wrote:
>>>>>> 
>>>>>> getting these
>>>>>> 
>>>>>> [110176.160365] non-matching-uid symlink following attempted in 
>>>>>> sticky
>>>>>> world-writable directory by BrowserBlocking (fsuid 11071 != 10973)
>>>>>> 
>>>>>> finding lots on how to turn it off, but I'm just wondering where 
>>>>>> the
>>>>>> link is so I can fix/delete it.
>>>>> 
>>>>> ls -l on the link will tell you what it's linking to if that's what
>>>>> you're asking.
>>>>> 
>>>>> Steve S.
>>>>> 
>>>>> _______________________________________________
>>>>> talk mailing list
>>>>> talk at nblug.org
>>>>> http://nblug.org/cgi-bin/mailman/listinfo/talk
>>>> 
>>>> _______________________________________________
>>>> talk mailing list
>>>> talk at nblug.org
>>>> http://nblug.org/cgi-bin/mailman/listinfo/talk
>>> 
>>> 
>>> _______________________________________________
>>> talk mailing list
>>> talk at nblug.org
>>> http://nblug.org/cgi-bin/mailman/listinfo/talk
>> 
>> _______________________________________________
>> talk mailing list
>> talk at nblug.org
>> http://nblug.org/cgi-bin/mailman/listinfo/talk