sudo: Error dropping capabilities, aborting in Linux Centos 5.3

For some reason I keep getting this error when trying to run a sudo command eg:

sudo -u someuser somecommand

sudo: Error dropping capabilities, aborting

My version of sudo is: sudo-1.6.9p17-3.el5_3.1 and I've heard that version 1.7 fixes everything.  The only thing is yum does not think sudo has any update.  I guess the new version has not been committed to the RPM repository yet.

This is really a huge and annoying bug, imagine if you have a backup script or something else that depends on sudo.   I should add that this is an OpenVZ container it's happening on, I am not sure if that is part of the issue.

This is obviously a bug with sudo and hopefully the error will be fixed soon with a new version/update of sudo by the Centos team.

Solution

(it seems that some have said this is because the OpenVZ host does not have auditing in the kernel, it still seems that the sudo maintainers should be able to avoid this bug if it detects no audit capabilities though).

 

 wget http://mirror.centos.org/centos/5.3/os/SRPMS/sudo-1.6.9p17-3.el5.src.rpm

 rpm -ivh sudo-1.6.9p17-3.el5.src.rpm


error: cannot create %sourcedir /usr/src/redhat/SOURCES

mkdir -p /usr/src/redhat/SOURCES
rpm -ivh sudo-1.6.9p17-3.el5.src.rpm


vi /usr/src/redhat/SPECS/sudo.spec

Replace:


BuildRequires: audit-libs-devel libcap-devel

with

BuildRequires: libcap-devel

Change "--with-ldap" to "--with-ldap \" and add below it:
--without-audit


For these steps you need the "rpm-build" package.  Install it if you don't have the binary "rpmbuild" already.


rpmbuild -bb /usr/src/redhat/SPECS/sudo.spec

You'll get these errors unless you have the other required packages:

error: Failed build dependencies:
        pam-devel is needed by sudo-1.6.9p17-3.i386
        openldap-devel is needed by sudo-1.6.9p17-3.i386
        flex is needed by sudo-1.6.9p17-3.i386
        bison is needed by sudo-1.6.9p17-3.i386
        automake is needed by sudo-1.6.9p17-3.i386
        autoconf is needed by sudo-1.6.9p17-3.i386
        libtool is needed by sudo-1.6.9p17-3.i386
        libcap-devel is needed by sudo-1.6.9p17-3.i386


yum install pam-devel openldap-devel flex bison automake autoconf libtool libcap-devel


Try again:

rpmbuild -bb /usr/src/redhat/SPECS/sudo.spec

Install new/updated sudo package:

rpm -Uvh --force /usr/src/redhat/RPMS/i386/sudo-1.6.9p17-3.i386.rpm


Now sudo away :)

 


Tags:

sudo, capabilities, aborting, linux, centos, eg, someuser, somecommand, _, ve, fixes, yum, update, rpm, repository, openvz, container, auditing, kernel, maintainers, detects, audit, wget, http, org, os, srpms, src, ivh, sourcedir, usr, redhat, sources, mkdir, vi, specs, spec, buildrequires, libs, devel, libcap, quot, ldap, install, binary, rpmbuild, bb, ll, errors, packages, dependencies, pam, openldap, flex, bison, automake, autoconf, libtool, updated, uvh, rpms,

Latest Articles

  • How To Change Storage Location in Docker.io
  • RTL8812BU and RTL8822BU Linux Driver Ubuntu Setup Archer T3U Plus
  • Kazam video blank/high size and not working when recording solution
  • Cisco UC CME How To Enable Licensed Features
  • from pip._internal.cli.main import main File "/usr/local/lib/python3.5/dist-packages/pip/_internal/cli/main.py", line 60 sys.stderr.write(f"ERROR: {exc}") from pip._internal.cli.main import main File "/usr/local/lib/python3.5/dist-packag
  • ModuleNotFoundError: No module named 'pip._internal' solution python
  • grub blank screen how to manually boot kernel and initrd Linux Ubuntu Debian Centos won't boot solution
  • Cisco Switch / Router How To Restore Factory Default Settings
  • Cisco 2900 3900 Router Password Reset How To Reset Enable Password
  • How To Install convert MBR Legacy booting GRUB to EFI from a non-EFI Linux Environment Ubuntu Mint Debian
  • Translating "cisco" ...domain server (255.255.255.255) Cisco Router/Switch Solution
  • Error opening tftp://10.0.2.2/network-confg (Permission denied) - How To Fix Cisco Router Switch Error Solution Console
  • GRUB error: invalid arch-independent ELF magic. Solution How To Fix Linux Centos Ubuntu Mint
  • How to find out which package a file belongs to in Debian Mint Ubuntu Linux
  • Centos 7 not mounting /etc/fstab partitions
  • CentOS 7 / 8 cannot boot with with mdadm RAID array solution
  • How To Add Default Gateway in Linux using the ip route command routing
  • Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: No URLs in mirrorlist Solution for Centos8 yum package install error
  • md mdadm array inactive how to start and activate the RAID array
  • Loaded: masked (Reason: Unit hostapd.service is masked.) Solution in Linux Debian Mint Ubuntu