#48314 - [PATCH] Install guix system on Raspberry Pi

Package	Source(s)		Maintainer(s)
guix-patches		PTS Buildd Popcon

Message #80 received at 48314@debbugs.gnu.org (full text, mbox, reply):

Received: (at 48314) by debbugs.gnu.org; 14 Apr 2022 13:57:44 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Apr 14 09:57:44 2022
Received: from localhost ([127.0.0.1]:56823 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1nezyi-00049q-FO
	for submit@debbugs.gnu.org; Thu, 14 Apr 2022 09:57:44 -0400
Received: from andre.telenet-ops.be ([195.130.132.53]:39382)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maximedevos@telenet.be>) id 1nezyg-00049g-Fv
 for 48314@debbugs.gnu.org; Thu, 14 Apr 2022 09:57:43 -0400
Received: from ptr-bvsjgyhxw7psv60dyze.18120a2.ip6.access.telenet.be
 ([IPv6:2a02:1811:8c09:9d00:3c5f:2eff:feb0:ba5a])
 by andre.telenet-ops.be with bizsmtp
 id Jdxg2700C4UW6Th01dxgLQ; Thu, 14 Apr 2022 15:57:40 +0200
Message-ID: <80407def8662e15c9a6ab7ffcfaaa89137641747.camel@telenet.be>
Subject: Re: [PATCH v5] Install guix system on Raspberry Pi
From: Maxime Devos <maximedevos@telenet.be>
To: phodina <phodina@protonmail.com>
Date: Thu, 14 Apr 2022 15:57:35 +0200
In-Reply-To: <_G8Wp0VvUVQwRBwRglLXwBugZu8x_4_D739HjTzIFUqEBlHTehUq9JkCc0pSXhvZC1bJZTlFicZBHYs5ZROL_4LVIPQs34I2b7OymZM0FNU=@protonmail.com>
References: <19E4796A-B0DB-444F-8773-2E8D3EF6132D@vodafonemail.de>
 <1JV7YdNsB7LB0ij9pMN5ktIsdpU8g98Lpu0yOrl_r6wFvRjqRJ5XqOktugKlia2rSeyNVEwY0b8VJrFJr1TsWgOIo-JW6EmTpj6Bz4dNzxQ=@protonmail.com>
 <b661d9b6c7b44262285f544110b335ef02e6a402.camel@telenet.be>
 <zMqJOXxxdBE_tlTtNY-q9vjI2_uBFY36RprO1tJWhHBh9S6NO4l46DHNOjHgM5GXf3SxAbC4tR27tN3sUZWS9Y69U70BGtc47McF0TE5Gaw=@protonmail.com>
 <86d36088dc4c81112e1529ef9e5e46d6629912c1.camel@telenet.be>
 <j-6Mh97olCgYy-HTnXD1Wddae1w06eUlRPTw9m2QCxidzQeWs7nIp9EBjGrtgSdImIddGLbRv6mI9cwKeFr5Y9KiaOQfVsMVmFy1DXbQ3I4=@protonmail.com>
 <_G8Wp0VvUVQwRBwRglLXwBugZu8x_4_D739HjTzIFUqEBlHTehUq9JkCc0pSXhvZC1bJZTlFicZBHYs5ZROL_4LVIPQs34I2b7OymZM0FNU=@protonmail.com>
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-HeWEJrHFDddSfh32VLoM"
User-Agent: Evolution 3.38.3-1 
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22;
 t=1649944660; bh=mSDXyHcikKj/Wfh3YpMI5bviwKmSq+eTpfXjHpi+nrE=;
 h=Subject:From:To:Cc:Date:In-Reply-To:References;
 b=F++sl97MkVOzRSHErNItwh+d6maTfY924SmAdgiD+qK5LaXQmngK7NcZPVzPBhKC2
 XvgmMGAhJBGsgq7Da7WNkva74P+zHJ9uK7bG+o8Mz3kaycWm0QupiZ1MgKyVIgolzN
 KhWD0lNk127gRxsOaDeXazV2e+UfKQJv6ck8v8/fFCYUnojD8AQhcBGp/IF7PeukbB
 yvCPWsvuZe/48INGHPGb3XWBsTONzsDNnz3E8BMksMDexFx+lFVwf7Ll1r42R8NZdS
 rqxW9xuOczLTrx7VwNxOBjzgxDVIVuFFLMsK67LdvqYxFs6LyLi48Y+uUEiOHvo2r/
 mz9qvvR1W1pJQ==
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: 48314
Cc: Stefan <stefan-guix@vodafonemail.de>,
 "48314@debbugs.gnu.org" <48314@debbugs.gnu.org>
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

[Message part 1 (text/plain, inline)]

phodina schreef op do 14-04-2022 om 13:03 [+0000]:
> ~$ ssh pi@192.168.1.181
> Last login: Thu Apr 14 14:52:56 2022 from 192.168.1.224
> Could not chdir to home directory /home/pi: Permission denied
> -bash: /home/pi/.bash_profile: Permission denied
> -bash-5.1$ id -u
> 1002
> -bash-5.1$ id -gn
> users
> -bash-5.1$ sudo -E /gnu/store/ja92d7xpmyh94gm6n83bajx9dy4h6pbl-bash-5.1.8/bin/bash
> root@raspberrypi-guix /# ls -al /home/pi
> total 40
> drwx------ 4 1000 users 4096 Nov 24 08:16 ./

You are logging in as 1002.  /home/pi is owned by ‘1000’.  Is this
difference intentional?

Maybe you have added two users, but with the home directory?
(guesswork).

> As you can see the execute bit is missing. Therefore running

The user has the read-write-execute bits, the group and other don't.

> chmod +x /home/pi/
>
> fixed the problem. But I'm unsure why the home dir was created
> without the those flags.

I'm not on Guix System at the moment, so I cannot tell what the usual
behaviour is, but why wouldn't the home directory be non-group-
executable and non-other executable? 

Unless you want to share the contents of your home to other users on
the system, or if you have a web server that looks for
http://.../~pi/index.html in /home/pi/web/index.html or the like,
restricting readability, writability and executability to the actual
‘owner’ of the directory seems good security practice to me.

Usually, AFAICT, all that's needed is for $HOME to be user-readable,
writable and executable.

(/me quickly does "chmod go-rwx $HOME")

Greetings,
Maxime.

[signature.asc (application/pgp-signature, inline)]

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 14:51:18 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#48314 [PATCH] Install guix system on Raspberry Pi