DNS auflösen geht nur als root user

Einrichten des lokalen Netzes, Verbindung zu anderen Computern und Diensten.
Antworten
desired
Beiträge: 17
Registriert: 12.09.2011 05:46:20

DNS auflösen geht nur als root user

Beitrag von desired » 12.09.2011 05:52:34

Hi!

Habe leider ein seltsames Problem. DNS auflösen geht nur als root. Egal mit welchem Programm (getestet irssi, wget...). Hier mal ein Log.

Code: Alles auswählen

ghost@localhost:/home$ su
Password:
localhost:/home# wget google.de
--2011-09-12 03:40:55--  http://google.de/
Resolving google.de... 209.85.148.105, 209.85.148.106, 209.85.148.147, ...
Connecting to google.de|209.85.148.105|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://www.google.de/ [following]
--2011-09-12 03:40:55--  http://www.google.de/
Resolving www.google.de... 209.85.148.103, 209.85.148.104, 209.85.148.105, ...
Reusing existing connection to google.de:80.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `index.html.7'

    [ <=>                                   ] 10,260      --.-K/s   in 0.01s

2011-09-12 03:40:55 (786 KB/s) - `index.html.7' saved [10260]

localhost:/home# su ghost
ghost@localhost:/home$ wget google.de
--2011-09-12 03:41:05--  http://google.de/
Resolving google.de... failed: Temporary failure in name resolution.
wget: unable to resolve host address `google.de'
ghost@localhost:/home$
Sobald ich als nicht-root eingeloggt bin, kommt der DNS Fehler.

Hier noch die /etc/resolv.conf

Code: Alles auswählen

domain mynetwork
nameserver 85.214.73.63
nameserver 204.152.184.76
nameserver 213.73.91.35
Was ich bei domain eintragen soll, ist mir nicht ganz klar, habe keine Domain, keinen Server, debian läuft auf meinem Handy, entweder per Wlan oder 2g verbunden.

Der normale user kann die resolv.conf aber auch lesen.

Was kann ich da machen?

uname
Beiträge: 12481
Registriert: 03.06.2008 09:33:02

Re: DNS auflösen geht nur als root user

Beitrag von uname » 12.09.2011 08:30:59

Installiere mal Debianstrace. Da bei Ausführung mehrere Dateien erzeugt werden wechsel in ein leeres temporäres Verzeichnis.

Code: Alles auswählen

strace -ff -o out.txt wget google.de
Durchsuche die erzeugten Logdaten out.txt.<pid> nach "resolv.conf". Poste die Ausgaben.

desired
Beiträge: 17
Registriert: 12.09.2011 05:46:20

Re: DNS auflösen geht nur als root user

Beitrag von desired » 12.09.2011 12:46:44

Danke für die Hilfe.

Gut, hier zunächst mal alle Zeilen in denen resolv.conf vorkommt. (Als nicht-root ausgeführt.)

Code: Alles auswählen

open("/etc/resolv.conf", O_RDONLY)      = 3

stat64("/etc/resolv.conf", {st_mode=S_IFREG|0666, st_size=91, ...}) = 0
open("/etc/resolv.conf", O_RDONLY)      = 3

stat64("/etc/resolv.conf", {st_mode=S_IFREG|0666, st_size=91, ...}) = 0
Und da noch viele andere Sachen drin stehen, die nicht gut klingen, hier vorsorglich mal noch das komplette Log.

Code: Alles auswählen

execve("/usr/bin/wget", ["wget", "google.de"], [/* 25 vars */]) = 0
brk(0)                                  = 0x4e000
uname({sys="Linux", node="localhost", ...}) = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001d000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=11101, ...}) = 0
mmap2(NULL, 11101, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40020000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0004\t\0\0004\0\0\0\270"..., 512) = 512
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40023000
fstat64(3, {st_mode=S_IFREG|0644, st_size=9752, ...}) = 0
mmap2(NULL, 41140, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40028000
mprotect(0x4002a000, 28672, PROT_NONE)  = 0
mmap2(0x40031000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0x40031000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/librt.so.1", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\220\26\0\0004\0\0\0\314"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=26572, ...}) = 0
mmap2(NULL, 57844, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40034000
mprotect(0x4003a000, 28672, PROT_NONE)  = 0
mmap2(0x40041000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5) = 0x40041000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libssl.so.0.9.8", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0,\305\0\0004\0\0\0L"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=250460, ...}) = 0
mmap2(NULL, 281956, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40044000
mprotect(0x4007e000, 28672, PROT_NONE)  = 0
mmap2(0x40085000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x39) = 0x40085000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libcrypto.so.0.9.8", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0d\327\3\0004\0\0\0\364"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=1232940, ...}) = 0
mmap2(NULL, 1277460, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4008c000
mprotect(0x401a5000, 28672, PROT_NONE)  = 0
mmap2(0x401ac000, 86016, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x118) = 0x401ac000
mmap2(0x401c1000, 11796, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x401c1000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libgcc_s.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0('\0\0004\0\0\0\364"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=48172, ...}) = 0
mmap2(NULL, 79608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x401c4000
mprotect(0x401d0000, 28672, PROT_NONE)  = 0
mmap2(0x401d7000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb) = 0x401d7000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\344O\1\0004\0\0\0\234"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1168924, ...}) = 0
mmap2(NULL, 1204776, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x401d8000
mprotect(0x402f2000, 28672, PROT_NONE)  = 0
mmap2(0x402f9000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x119) = 0x402f9000
mmap2(0x402fc000, 8744, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x402fc000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libpthread.so.0", O_RDONLY)  = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\310B\0\0004\0\0\0000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=110576, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001e000
mmap2(NULL, 119300, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40300000
mprotect(0x40313000, 28672, PROT_NONE)  = 0
mmap2(0x4031a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12) = 0x4031a000
mmap2(0x4031c000, 4612, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4031c000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libz.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\330\25\0\0004\0\0\0\200"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=82360, ...}) = 0
mmap2(NULL, 113756, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40320000
mprotect(0x40334000, 28672, PROT_NONE)  = 0
mmap2(0x4033b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13) = 0x4033b000
mprotect(0xbe88f000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_GROWSDOWN) = 0
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001f000
set_tls(0x4001f200, 0x4001f200, 0x684, 0x4001f8d8, 0x40025050) = 0
mprotect(0x4031a000, 4096, PROT_READ)   = 0
mprotect(0x402f9000, 4096, PROT_READ)   = 0
mprotect(0x40041000, 4096, PROT_READ)   = 0
mprotect(0x40031000, 4096, PROT_READ)   = 0
munmap(0x40020000, 11101)               = 0
set_tid_address(0x4001eda8)             = 3076
SYS_338(0x4001edb0, 0xc, 0xffffffec, 0x1, 0x4001f200) = 0
futex(0xbe88f744, FUTEX_WAKE_PRIVATE, 1) = 0
rt_sigaction(SIGRTMIN, {0x403041cc, [], SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x40303d3c, [], SA_RESTART|SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
brk(0)                                  = 0x4e000
brk(0x6f000)                            = 0x6f000
stat64("/etc/wgetrc", {st_mode=S_IFREG|0644, st_size=4221, ...}) = 0
open("/etc/wgetrc", O_RDONLY|O_LARGEFILE) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=4221, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
read(3, "###\n### Sample Wget initializatio"..., 4096) = 4096
read(3, "on:\n#backup_converted = off\n\n# To"..., 4096) = 125
read(3, ""..., 4096)                    = 0
close(3)                                = 0
munmap(0x40020000, 4096)                = 0
stat64("/home/ghost/.wgetrc", 0xbe88f508) = -1 ENOENT (No such file or directory)
ioctl(2, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(2, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
rt_sigaction(SIGHUP, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGHUP, {0x237bc, [HUP], SA_RESTART|0x4000000}, {SIG_IGN}, 8) = 0
rt_sigaction(SIGUSR1, {0x237bc, [USR1], SA_RESTART|0x4000000}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGWINCH, {0x24098, [WINCH], SA_RESTART|0x4000000}, {SIG_DFL}, 8) = 0
stat64("index.html", 0xbe88f230)        = -1 ENOENT (No such file or directory)
stat64("index.html", 0xbe88f280)        = -1 ENOENT (No such file or directory)
gettimeofday({1315823697, 301675}, NULL) = 0
open("/etc/localtime", O_RDONLY)        = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0"..., 4096) = 118
_llseek(3, -6, [112], SEEK_CUR)         = 0
read(3, "\nUTC0\n"..., 4096)            = 6
close(3)                                = 0
munmap(0x40020000, 4096)                = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
write(2, "--2011-09-12 10:34:57--  http://g"..., 43) = 43
stat64("/home/ghost/.netrc", 0xbe88eff0) = -1 ENOENT (No such file or directory)
write(2, "Resolving google.de... "..., 23) = 23
socket(PF_NETLINK, SOCK_RAW, 0)         = 3
bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(3, {sa_family=AF_NETLINK, pid=3076, groups=00000000}, [12]) = 0
gettimeofday({1315823697, 337306}, NULL) = 0
sendto(3, "\24\0\0\0\26\0\1\3Q\340mN\0\0\0\0\0\0\0\0"..., 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"0\0\0\0\24\0\2\0Q\340mN\4\f\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1\10"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 108
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0Q\340mN\4\f\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0Q\340mN\4\f\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=475, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
read(3, "# /etc/nsswitch.conf\n#\n# Example "..., 4096) = 475
read(3, ""..., 4096)                    = 0
close(3)                                = 0
munmap(0x40020000, 4096)                = 0
open("/etc/host.conf", O_RDONLY)        = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=9, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
read(3, "multi on\n"..., 4096)          = 9
read(3, ""..., 4096)                    = 0
close(3)                                = 0
munmap(0x40020000, 4096)                = 0
futex(0x402fd55c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
open("/etc/resolv.conf", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0666, st_size=91, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
read(3, "domain mynetwork\nnameserver 85.21"..., 4096) = 91
read(3, ""..., 4096)                    = 0
close(3)                                = 0
munmap(0x40020000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=11101, ...}) = 0
mmap2(NULL, 11101, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40020000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libnss_files.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\30\30\0\0004\0\0\0\24"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=38516, ...}) = 0
mmap2(NULL, 70336, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4033c000
mprotect(0x40345000, 28672, PROT_NONE)  = 0
mmap2(0x4034c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8) = 0x4034c000
close(3)                                = 0
mprotect(0x4034c000, 4096, PROT_READ)   = 0
munmap(0x40020000, 11101)               = 0
open("/etc/hosts", O_RDONLY|O_CLOEXEC)  = -1 ENOENT (No such file or directory)
open("/etc/hosts", O_RDONLY|O_CLOEXEC)  = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=11101, ...}) = 0
mmap2(NULL, 11101, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40020000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libnss_dns.so.2", O_RDONLY)  = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\314\n\0\0004\0\0\0\334"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=13884, ...}) = 0
mmap2(NULL, 45224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40350000
mprotect(0x40353000, 28672, PROT_NONE)  = 0
mmap2(0x4035a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2) = 0x4035a000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libresolv.so.2", O_RDONLY)   = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\200\37\0\0004\0\0\0\34"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=59300, ...}) = 0
mmap2(NULL, 100368, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4035c000
mprotect(0x4036a000, 28672, PROT_NONE)  = 0
mmap2(0x40371000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd) = 0x40371000
mmap2(0x40373000, 6160, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40373000
close(3)                                = 0
mprotect(0x40371000, 4096, PROT_READ)   = 0
mprotect(0x4035a000, 4096, PROT_READ)   = 0
munmap(0x40020000, 11101)               = 0
stat64("/etc/resolv.conf", {st_mode=S_IFREG|0666, st_size=91, ...}) = 0
open("/etc/resolv.conf", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0666, st_size=91, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000
read(3, "domain mynetwork\nnameserver 85.21"..., 4096) = 91
read(3, ""..., 4096)                    = 0
close(3)                                = 0
munmap(0x40020000, 4096)                = 0
gettimeofday({1315823697, 438965}, NULL) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = -1 EACCES (Permission denied)
gettimeofday({1315823697, 441326}, NULL) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = -1 EACCES (Permission denied)
stat64("/etc/resolv.conf", {st_mode=S_IFREG|0666, st_size=91, ...}) = 0
gettimeofday({1315823697, 445470}, NULL) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = -1 EACCES (Permission denied)
gettimeofday({1315823697, 446818}, NULL) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = -1 EACCES (Permission denied)
write(2, "failed: Temporary failure in name"..., 46) = 46
write(2, "wget: unable to resolve host addr"..., 49) = 49
gettimeofday({1315823697, 456803}, NULL) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
close(2)                                = 0
exit_group(1)                           = ?

uname
Beiträge: 12481
Registriert: 03.06.2008 09:33:02

Re: DNS auflösen geht nur als root user

Beitrag von uname » 12.09.2011 13:01:18

Leider bin ich auch kein Profi in Strace-Logs lesen. Aber es scheint so, dass zwar /etc/resolv.conf gelesen wurde, jedoch kein Socket zum Nameserver aufgebaut werden kann. Keine Ahnung woran das liegt.

1.) Kann der normale Benutzer ein "wget" zu einer IP durchführen?
2.) Funktioniert generell die Nameserver-Auflösung?

Code: Alles auswählen

host google.de
nslookup google.de
dig google.de
Poste Auszüge der Ergebnisse.

desired
Beiträge: 17
Registriert: 12.09.2011 05:46:20

Re: DNS auflösen geht nur als root user

Beitrag von desired » 12.09.2011 13:40:54

Als root geht alles.

Wget zu einer IP als user geht auch nicht.

Code: Alles auswählen

ghost@localhost:~/test2$
ghost@localhost:~/test2$ host google.de
85.214.73.63 socket: Permission denied
204.152.184.76 socket: Permission denied
213.73.91.35 socket: Permission denied
85.214.73.63 socket: Permission denied
204.152.184.76 socket: Permission denied
213.73.91.35 socket: Permission denied
google.de A record not found, try again
ghost@localhost:~/test2$
ghost@localhost:~/test2$ nslookup google.de
net.c:142: socket() failed: Permission denied
net.c:142: socket() failed: Permission denied
(null): can't find either v4 or v6 networking
ghost@localhost:~/test2$
ghost@localhost:~/test2$ dig google.de
net.c:142: socket() failed: Permission denied
net.c:142: socket() failed: Permission denied
dig: can't find either v4 or v6 networking
ghost@localhost:~/test2$
ghost@localhost:~/test2$ wget 209.85.148.147
--2011-09-12 11:37:53--  http://209.85.148.147/
Connecting to 209.85.148.147:80... failed: Permission denied.
Retrying.
Könnte es etwas mit den Benutzerrechten sein? Kann man etwas bei der Benutzeraccounterstellung falsch machen (einfach mit adduser gemacht)?

uname
Beiträge: 12481
Registriert: 03.06.2008 09:33:02

Re: DNS auflösen geht nur als root user

Beitrag von uname » 12.09.2011 14:33:32

Sehr komisch. Vielleicht irgendwelche Limits. Was sagt:

Code: Alles auswählen

ulimit -a
Nachtrag: Schau in zugewiesenen Gruppen von "root" und dem User unter /etc/groups.

Vielleicht hast du eine etwas komische Plattform. Was ist es genau für ein Linux. Schau z.B. hier:

http://forums.debian.net/viewtopic.php?f=5&t=62151

desired
Beiträge: 17
Registriert: 12.09.2011 05:46:20

Re: DNS auflösen geht nur als root user

Beitrag von desired » 12.09.2011 15:01:19

Komische Platform, komisches Linux, kann man wohl sagen. :D
Sony Ericsson XPERIA X8
http://forum.xda-developers.com/showthr ... ?t=1254283
Geil als Homeserver, brauch bei Ladegerätbetrieb nur zwischen 3 und 4 Watt und macht keinerlei Geräusche.

So, die Logs, nach denen Du gefragt hast.

Code: Alles auswählen

ghost@localhost:~/test2$ ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 40
file size               (blocks, -f) unlimited
pending signals                 (-i) 1720
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1024
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) 1720
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited
ghost@localhost:~/test2$

Code: Alles auswählen

ghost@localhost:~/test2$ uname -a
Linux localhost 2.6.29 #1 PREEMPT Fri Dec 17 18:35:45 2010 armv6l GNU/Linux

Code: Alles auswählen

localhost:/home/ghost/test2# cat /etc/debian_version
lenny/sid
Der verlinkte Thread hat geholfen. Habe einfach mal beide Befehle eingegeben.

Code: Alles auswählen

localhost:/etc# groupadd -g 3003 aid_inet
localhost:/etc# usermod -G aid_inet ghost
Ob jetzt alles korrekt eingestellt ist, weiß ich nicht, jedenfalls geht jetzt schonmal wget und irssi als nicht-root, schon ein riesen Fortschritt. Danke! :THX: :THX: :THX:

uname
Beiträge: 12481
Registriert: 03.06.2008 09:33:02

Re: DNS auflösen geht nur als root user

Beitrag von uname » 12.09.2011 15:10:35

Aber verstanden hast du die Befehle? Könnte ja mal jemand hier im Forum was Böses wollen und dir damit das System zerschießen. "man" ist dein Freund:

Code: Alles auswählen

man groupadd
man usermod
Im Prinzip hast du eine Gruppe mit GID 3003 und Namen aid_inet angelegt und dann deinem Benutzer diese Gruppe zugewiesen.

Antworten