Announcing INCEPTION: Deeper access to your N9 [0.1.1] - Page 13 - maemo.org

Active Topics

Maemo repository (5)
to Community by dredlok706 - 1 day, 10 hrs ago
Re-commissioning N9 in 2018 (127)
to MeeGo / Harmattan by smatkovi - 1 day, 13 hrs ago
Porting apps to Leste (41)
to Maemo 7 / Leste by Arno_11 - 2 days, 6 hrs ago
List of well performing apps on Leste (33)
to Maemo 7 / Leste by teroyk - 2 days, 15 hrs ago
N900 is not recognizable on any of my devices (windows 10,7, xp) What can I do? (1)
to Nokia N900 by nieldk - 3 days, 19 hrs ago
Error after installing Leste on sdcard (13)
to Maemo 7 / Leste by Maemish - 6 days, 22 hrs ago
more...

Page 13 of 22

Thread Tools

	coderus	2012-03-18 , 17:06
	Posts: 6,436 \| Thanked: 12,701 times \| Joined on Nov 2011 @ Ängelholm, Sweden	#121

it's standart lunux sudo. google, if never worked on linux before.

Arie	2012-03-18 , 22:31
Posts: 1,539 \| Thanked: 1,604 times \| Joined on Oct 2011 @ With my N9	#122

Originally Posted by coderus

it's standart lunux sudo. google, if never worked on linux before.

Can I install it with opensh already installed?

__________________
Arie|www.everythingn9.com|Nokia N9 64GB x2|Nokia N950

@everythingn9

Temporary Inception Fix

Times Banned from TMO: 4

itsnotabigtruck	2012-03-18 , 22:40
Posts: 245 \| Thanked: 915 times \| Joined on Feb 2012	#123

Originally Posted by Arie

Can I install it with opensh already installed?

Yeah.

Note that coderus' sudo is probably not Aegis-aware, so you won't be able to do certain things that you can with opensh, such as run aegisctl. (not sure - correct me if I'm wrong)

__________________

I N C E P T I O N

Calendarrr | ad-hac | sparsify | aegisctl
MilkyTracker | Mosh
Firmware Flashing Guide

rcolistete	2012-03-18 , 23:11
Posts: 1,269 \| Thanked: 3,961 times \| Joined on May 2011 @ Brazil	#124

Thanks itsnotabigtruck for you Inception project. It made possible to :
- use Easy Debian without flashing open kernel;
- use chroot images with programming languages/tools (gcc/g++, etc);
- run binaries created by gcc/g++ running on Nokia N9.

__________________
Python, C/C++, Qt and CAS developer. For Maemo/MeeGo/Sailfish :
Integral, Derivative, Limit - calculating mathematical integrals, derivatives and limits. SymPy - Computer Algebra System.
MatPlotLib - 2D & 3D plots in Python. IPython - Python interactive shell.
-- My blog about mobile & scientific computing ---
Sailfish : Sony Xperia X, Gemini, Jolla, Jolla C, Jolla Tablet, Nexus 4. Nokia N9, N900, N810.

	coderus	2012-03-19 , 04:07
	Posts: 6,436 \| Thanked: 12,701 times \| Joined on Nov 2011 @ Ängelholm, Sweden	#125

itsnotabigtruck, of course, it's like just su (devel-su), no extra hacky privileges =)
i made this for making me happy =) everytime using pc i'm using sudo, and when switching to phone ssh i want to use sudo too. devel-su too complicated to type

just usinng it for sudo apt-get, sudo dpkg, sudo nano, sudo mc and so on in daily usage =)

but of course, i can inject checking for opensh installing and make sudo work thru opensh or just sh.

	Muzimak	2012-03-19 , 04:17
	Posts: 704 \| Thanked: 241 times \| Joined on Dec 2011 @ Johannesburg - South Africa	#126

So has it brought any Developer any use yet and what?

	coderus	2012-03-19 , 04:19
	Posts: 6,436 \| Thanked: 12,701 times \| Joined on Nov 2011 @ Ängelholm, Sweden	#127

Muzimak, of course, look into chroot thread.

	lkravovicz	2012-03-19 , 09:46
	Posts: 132 \| Thanked: 148 times \| Joined on Mar 2007 @ Tallinn, Estonia	#128

Originally Posted by rcolistete

Thanks itsnotabigtruck for you Inception project. It made possible to :
- use Easy Debian without flashing open kernel;
- use chroot images with programming languages/tools (gcc/g++, etc);
- run binaries created by gcc/g++ running on Nokia N9.

Sounds like Gentoo Prefix is now possible

	wicket	2012-03-25 , 19:45
	Posts: 634 \| Thanked: 3,266 times \| Joined on May 2010 @ Colombia	#129

I've noticed a couple of oddities when running an incepted opensh.

First of all, I am unable to run a simple shell script under opensh:

Code:

BusyBox v1.20.0.git (MeeGo 3:1.20-0.1+0m7) built-in shell (ash)
Enter 'help' for a list of built-in commands.

/home/developer $ cat hello.sh
#!/bin/sh

echo Hello world!
/home/developer $ ls -l hello.sh
-rwxr-xr-x    1 user     users           29 Mar 25 02:43 hello.sh
/home/developer $ ./hello.sh
Hello world!
/home/developer $ devel-su -
Password: 


BusyBox v1.20.0.git (MeeGo 3:1.20-0.1+0m7) built-in shell (ash)
Enter 'help' for a list of built-in commands.

mesg: Operation not permitted
RM680-02-6_PR_RM680:~# cd ~developer
RM680-02-6_PR_RM680:/home/developer# accli -I | grep -v IMEI
Current mode: normal
Credentials:
        UID::root
        GID::root
        GRP::root
        GRP::adm
        GRP::dialout
        GRP::pulse-access
RM680-02-6_PR_RM680:/home/developer# ./hello.sh
Hello world!
RM680-02-6_PR_RM680:/home/developer# develsh


BusyBox v1.20.0.git (MeeGo 3:1.20-0.1+0m7) built-in shell (ash)
Enter 'help' for a list of built-in commands.

RM680-02-6_PR_RM680:/home/developer# accli -I | grep -v IMEI
Current mode: normal
Credentials:
        UID::root
        GID::root
        CAP::chown
        CAP::dac_read_search
        CAP::fowner
        CAP::fsetid
        CAP::kill
        CAP::linux_immutable
        CAP::net_bind_service
        CAP::net_broadcast
        CAP::net_admin
        CAP::net_raw
        CAP::ipc_lock
        CAP::ipc_owner
        CAP::sys_chroot
        CAP::sys_ptrace
        CAP::sys_pacct
        CAP::sys_boot
        CAP::sys_nice
        CAP::sys_resource
        CAP::sys_time
        CAP::sys_tty_config
        CAP::lease
        CAP::audit_write
        CAP::audit_control
        CAP::setfcap
        GRP::root
        GRP::dialout
        GRP::video
        GRP::pulse-access
        GRP::users
        GRP::metadata-users
        GRP::calendar
        AID::.develsh.
        tracker::tracker-extract-access
        tracker::tracker-miner-fs-access
        libaccounts-noa::accesssvt
        package-manager::packagemanager_limited
        package-manager::packagemanager_private
        icd2::icd2-plugin
        Cellular
        TrackerReadAccess
        TrackerWriteAccess
        Location
        FacebookSocial
        develsh::develsh
RM680-02-6_PR_RM680:/home/developer# ./hello.sh
Hello world!
RM680-02-6_PR_RM680:/home/developer# exit
RM680-02-6_PR_RM680:/home/developer# opensh


BusyBox v1.20.0.git (MeeGo 3:1.20-0.1+0m7) built-in shell (ash)
Enter 'help' for a list of built-in commands.

RM680-02-6_PR_RM680:/home/developer# accli -I | grep -v IMEI
Current mode: normal
Credentials:
        UID::root
        GID::root
        CAP::chown
        CAP::dac_override
        CAP::dac_read_search
        CAP::fowner
        CAP::fsetid
        CAP::kill
        CAP::setgid
        CAP::setuid
        CAP::linux_immutable
        CAP::net_bind_service
        CAP::net_broadcast
        CAP::net_admin
        CAP::net_raw
        CAP::ipc_lock
        CAP::ipc_owner
        CAP::sys_module
        CAP::sys_rawio
        CAP::sys_chroot
        CAP::sys_ptrace
        CAP::sys_pacct
        CAP::sys_admin
        CAP::sys_boot
        CAP::sys_nice
        CAP::sys_resource
        CAP::sys_time
        CAP::sys_tty_config
        CAP::mknod
        CAP::lease
        CAP::audit_write
        CAP::audit_control
        CAP::setfcap
        CAP::mac_override
        CAP::mac_admin
        GRP::root
        GRP::daemon
        GRP::bin
        GRP::sys
        GRP::adm
        GRP::tty
        GRP::disk
        GRP::lp
        GRP::mail
        GRP::news
        GRP::uucp
        GRP::man
        GRP::proxy
        GRP::kmem
        GRP::dialout
        GRP::fax
        GRP::voice
        GRP::cdrom
        GRP::floppy
        GRP::tape
        GRP::sudo
        GRP::audio
        GRP::dip
        GRP::www-data
        GRP::backup
        GRP::operator
        GRP::list
        GRP::irc
        GRP::src
        GRP::gnats
        GRP::shadow
        GRP::utmp
        GRP::video
        GRP::sasl
        GRP::plugdev
        GRP::staff
        GRP::games
        GRP::libuuid
        GRP::pulse
        GRP::pulse-access
        GRP::pulse-rt
        GRP::cal
        GRP::users
        GRP::input
        GRP::i2c
        GRP::adc
        GRP::upstart
        GRP::crypto
        GRP::metadata-users
        GRP::phonet
        GRP::csd
        GRP::messagebus
        GRP::acm
        GRP::gallerycoredata-users
        GRP::signon
        GRP::osa
        GRP::calendar
        GRP::libaccounts-noa
        GRP::lpm
        GRP::visualreminder
        GRP::location
        GRP::nfc
        GRP::slpgwd
        GRP::haldaemon
        GRP::powerdev
        GRP::developer
        GRP::ssh
        GRP::spool
        GRP::nogroup
        tcb
        libbb5-secbins::SEE_CCCWrite
        libbb5-secbins::SEE_DBIWrite
        libbb5-secbins::SEE_HWCWrite
        libbb5-secbins::SEE_NPCWrite
        libbb5-secbins::SEE_SecStorageMaintenance
        libbb5-secbins::SEE_SuperDongleWrite
        libbb5-secbins::SEE_SuperDongleOperation
        libbb5-secbins::SEE_SimLock3Write
        libbb5-secbins::SEE_SimLock3Operation
        libbb5-secbins::SEE_TerminalResponce
        libbb5-secbins::SEE_DeviceLockControl
        aegis-enabler::tcb-sign
        tracker::tracker-extract-access
        tracker::tracker-miner-fs-access
        libaccounts-noa::accesssvt
        package-manager::packagemanager_limited
        package-manager::packagemanager_private
        icd2::icd2-plugin
        Cellular
        TrackerReadAccess
        TrackerWriteAccess
        Location
        FacebookSocial
        csd-base::csd-plugin
        mce::CallStateControl
        mce::DeviceModeControl
        mce::LEDControl
        mce::TKLockControl
        mce::SensorControl
        dsme::DeviceStateControl
        usb-moded::usb-moded-dbus-bind
        usb-moded::USBControl
        aegisfs::AegisFSMountAdd
        aegisfs::aegisfs-verify
        timed::TimeControl
        timed::TimeBackup
        timed::TimedEventQueueWrite
        bme::BatteryControl
        phonet-at::acm-plugin
        applauncherd-launcher::access
        libaccounts-glib0::accounts-glib-access
        libaccounts-glib0::t
        libaccounts-glib0::tok
        smartsearch::RelevanceAllContentTypes
        signond::keychain-access
        signond::ssoProtectedWriteAccess
        signond::ssoProtectedReadAccess
        account-plugin-ovi::noaaccess
        account-plugin-ovi::sso-encryption-token
        caldav-plugin::access
        account-plugin-caldav::sso-encryption-token
        account-plugin-caldav::caldav-access
        account-plugin-facebook::sso-encryption-token
        account-plugin-facebook::access-control
        account-plugin-flickr::flickr-access
        account-plugin-google::sso-encryption-token
        account-plugin-google::access-control
        account-plugin-sip::sso-encryption-token
        account-plugin-sip::access-control
        account-plugin-twitter::sso-encryption-token
        account-plugin-twitter::access-control
        account-plugin-youtube::sso-encryption-token
        account-plugin-youtube::access-control
        aegis-certman-common-ca::CertCACommonAdd
        aegis-certman-common-ca::CertCAGlobalCodeSignAdd
        aegis-certman-common-ca::CertCASSLAdd
        aegis-certman-common-ca::CertCAWifiAdd
        aegis-certman-common-ca::CertCASMIMEAdd
        aegis-certman-common-ca::CertCACodeSignAdd
        aegis-certman-common-ca::CertUserSSLUse
        aegis-certman-common-ca::CertUserWifiUse
        aegis-certman-common-ca::CertUserSMIMEUse
        aegis-certman-common-ca::CertCACodeSignUse
        devicelock::ProvisioningSettings_PasswordForceChange
        devicelock::ProvisioningSettings_MinimalDeviceWipeTypeRequired
        devicelock::ProvisioningSettings_RnD_additional_Debug
        devicelock::DeviceLock_SetPassword
        devicelock::DeviceLockServiceOwn
        devicelock::DeviceLockStorageAccess
        devicelock::State_Unlocked
        devicelock::State_Locked
        devicelock::State_WipeMMC
        devicelock::State_Inhibit
        devicelock::DeviceLockControl
        devicelock::SSO_Exchange
        backup-framework::backup
        libaegis-session::aegis-session-data
        clean-device::CUDOrRFS
        system-ui-screenlock-nokia::ScreenLockEventPublish
        call-ui::call-ui
        duicontrolpanel-certificatesapplet::encryptedDBusMessages
        facebookqml::facebook-token
        mfe-account-ui-plugins::mfe-access
        mfe-account-ui-plugins::sso-encryption-token
        mms-manager::MmsProtectedWriteAccess
        mms-manager::MmsProtectedReadAccess
        mms-manager::MmsWorkerAccess
        libodnp::odnp
        libslpgw::slpgw
        location-ui::location-ui
        messaging-ui::messaging-ui
        ope-service0::OpeWapUtilAccess
        positioningd::LocationControl
        odnp-fpcd::odnp-fpcd
        signon-default-key-extension::key-storage
        signon-ui::signond-access
        telepathy-sasl-signon::sso-encryption-token
        telepathy-spirit::telepathy-spirit
        grob::grob-access
        grob::sso-encryption-token
        groovem-account-ui-plugins::groovem-access
        groovem-account-ui-plugins::sso-encryption-token
        nfcd::ui-agent
        nfcd::tool
        omb0::omb-communication
        npe-maemo0::LocationFW
        opensh::opensh
        SRC::com.nokia.maemo/local
        AID::com.nokia.maemo/local.opensh.
        account-plugin-skype::skype-access
        account-plugin-skype::sso-encryption-token
RM680-02-6_PR_RM680:/home/developer# ./hello.sh
sh: ./hello.sh: Operation not permitted

As you can see, it works fine as a regular user, as regular root user and also under a develsh shell but not under an opensh shell.

The following was written to dmesg. I hope someone can make more sense of this then I can.

Code:

[68900.679321] credp: sh: credential 0::1 not present in source SRC::9990005
[68900.679382] credp: sh: credential 0::6 not present in source SRC::9990005
[68900.679412] credp: sh: credential 0::7 not present in source SRC::9990005
[68900.679443] credp: sh: credential 0::16 not present in source SRC::9990005
[68900.679504] credp: sh: credential 0::17 not present in source SRC::9990005
[68900.679534] credp: sh: credential 0::21 not present in source SRC::9990005
[68900.679565] credp: sh: credential 0::27 not present in source SRC::9990005
[68900.679595] credp: sh: credential 0::32 not present in source SRC::9990005
[68900.679626] credp: sh: credential 0::33 not present in source SRC::9990005
[68900.679656] credp: sh: credential 3::9990209 not present in source SRC::9990005
[68900.679687] credp: sh: credential 3::9990210 not present in source SRC::9990005
[68900.679718] credp: sh: credential 3::9990211 not present in source SRC::9990005
[68900.679748] credp: sh: credential 3::9990212 not present in source SRC::9990005
[68900.679809] credp: sh: credential 3::9990213 not present in source SRC::9990005
[68900.679840] credp: sh: credential 3::9990214 not present in source SRC::9990005
[68900.679870] credp: sh: credential 3::9990215 not present in source SRC::9990005
[68900.679901] credp: sh: credential 3::9990216 not present in source SRC::9990005
[68900.679931] credp: sh: credential 3::9990217 not present in source SRC::9990005
[68900.679962] credp: sh: credential 3::9990218 not present in source SRC::9990005
[68900.679992] credp: sh: credential 3::9990219 not present in source SRC::9990005
[68900.680023] credp: sh: credential 3::9990223 not present in source SRC::9990005
[68900.680084] credp: sh: credential 3::9990001 not present in source SRC::9990005
[68900.680114] credp: sh: credential 3::9990248 not present in source SRC::9990005
[68900.680145] credp: sh: credential 3::9990283 not present in source SRC::9990005
[68900.680175] credp: sh: credential 3::9990445 not present in source SRC::9990005
[68900.680206] Aegis: credp_kcheck failed 9990005 hello.sh
[68900.680236] Aegis: hello.sh verification failed (source origin check)
[68900.696838] init: bme main process (5707) killed by KILL signal
[68900.698242] init: bme main process ended, respawning

It does run fine under opensh if I disable Aegis with "aegistl -s" as you might expect. I would be interested to know if anyone else is experiencing this behaviour either when using opensh via Inception or an open-mode kernel.

	wicket	2012-03-25 , 19:48
	Posts: 634 \| Thanked: 3,266 times \| Joined on May 2010 @ Colombia	#130

The second thing I discovered was that it is actually possible to run an incepted opensh shell as a regular user and gain full root privileges without needing to supply a root password!

Code:

~ $ /usr/sbin/aegisctl
+esdrtxk,-az
~ $ accli -I | grep -v IMEI
Current mode: normal
Credentials:
        UID::user
        GID::users
        GRP::adm
        GRP::dialout
        GRP::pulse-access
        GRP::users
~ $ opensh


BusyBox v1.20.0.git (MeeGo 3:1.20-0.1+0m7) built-in shell (ash)
Enter 'help' for a list of built-in commands.

/home/user # id -un
root
/home/user # id -unr
root
/home/user # accli -I | grep -v IMEI
Current mode: normal
Credentials:
        UID::root
        GID::root
        CAP::chown
        CAP::dac_override
        CAP::dac_read_search
        CAP::fowner
        CAP::fsetid
        CAP::kill
        CAP::setgid
        CAP::setuid
        CAP::linux_immutable
        CAP::net_bind_service
        CAP::net_broadcast
        CAP::net_admin
        CAP::net_raw
        CAP::ipc_lock
        CAP::ipc_owner
        CAP::sys_module
        CAP::sys_rawio
        CAP::sys_chroot
        CAP::sys_ptrace
        CAP::sys_pacct
        CAP::sys_admin
        CAP::sys_boot
        CAP::sys_nice
        CAP::sys_resource
        CAP::sys_time
        CAP::sys_tty_config
        CAP::mknod
        CAP::lease
        CAP::audit_write
        CAP::audit_control
        CAP::setfcap
        CAP::mac_override
        CAP::mac_admin
        GRP::root
        GRP::daemon
        GRP::bin
        GRP::sys
        GRP::adm
        GRP::tty
        GRP::disk
        GRP::lp
        GRP::mail
        GRP::news
        GRP::uucp
        GRP::man
        GRP::proxy
        GRP::kmem
        GRP::dialout
        GRP::fax
        GRP::voice
        GRP::cdrom
        GRP::floppy
        GRP::tape
        GRP::sudo
        GRP::audio
        GRP::dip
        GRP::www-data
        GRP::backup
        GRP::operator
        GRP::list
        GRP::irc
        GRP::src
        GRP::gnats
        GRP::shadow
        GRP::utmp
        GRP::video
        GRP::sasl
        GRP::plugdev
        GRP::staff
        GRP::games
        GRP::libuuid
        GRP::pulse
        GRP::pulse-access
        GRP::pulse-rt
        GRP::cal
        GRP::users
        GRP::input
        GRP::i2c
        GRP::adc
        GRP::upstart
        GRP::crypto
        GRP::metadata-users
        GRP::phonet
        GRP::csd
        GRP::messagebus
        GRP::acm
        GRP::gallerycoredata-users
        GRP::signon
        GRP::osa
        GRP::calendar
        GRP::libaccounts-noa
        GRP::lpm
        GRP::visualreminder
        GRP::location
        GRP::nfc
        GRP::slpgwd
        GRP::haldaemon
        GRP::powerdev
        GRP::developer
        GRP::ssh
        GRP::spool
        GRP::nogroup
        tcb
        libbb5-secbins::SEE_CCCWrite
        libbb5-secbins::SEE_DBIWrite
        libbb5-secbins::SEE_HWCWrite
        libbb5-secbins::SEE_NPCWrite
        libbb5-secbins::SEE_SecStorageMaintenance
        libbb5-secbins::SEE_SuperDongleWrite
        libbb5-secbins::SEE_SuperDongleOperation
        libbb5-secbins::SEE_SimLock3Write
        libbb5-secbins::SEE_SimLock3Operation
        libbb5-secbins::SEE_TerminalResponce
        libbb5-secbins::SEE_DeviceLockControl
        aegis-enabler::tcb-sign
        tracker::tracker-extract-access
        tracker::tracker-miner-fs-access
        libaccounts-noa::accesssvt
        package-manager::packagemanager_limited
        package-manager::packagemanager_private
        icd2::icd2-plugin
        Cellular
        TrackerReadAccess
        TrackerWriteAccess
        Location
        FacebookSocial
        csd-base::csd-plugin
        mce::CallStateControl
        mce::DeviceModeControl
        mce::LEDControl
        mce::TKLockControl
        mce::SensorControl
        dsme::DeviceStateControl
        usb-moded::usb-moded-dbus-bind
        usb-moded::USBControl
        aegisfs::AegisFSMountAdd
        aegisfs::aegisfs-verify
        timed::TimeControl
        timed::TimeBackup
        timed::TimedEventQueueWrite
        bme::BatteryControl
        phonet-at::acm-plugin
        applauncherd-launcher::access
        libaccounts-glib0::accounts-glib-access
        libaccounts-glib0::t
        libaccounts-glib0::tok
        smartsearch::RelevanceAllContentTypes
        signond::keychain-access
        signond::ssoProtectedWriteAccess
        signond::ssoProtectedReadAccess
        account-plugin-ovi::noaaccess
        account-plugin-ovi::sso-encryption-token
        caldav-plugin::access
        account-plugin-caldav::sso-encryption-token
        account-plugin-caldav::caldav-access
        account-plugin-facebook::sso-encryption-token
        account-plugin-facebook::access-control
        account-plugin-flickr::flickr-access
        account-plugin-google::sso-encryption-token
        account-plugin-google::access-control
        account-plugin-sip::sso-encryption-token
        account-plugin-sip::access-control
        account-plugin-twitter::sso-encryption-token
        account-plugin-twitter::access-control
        account-plugin-youtube::sso-encryption-token
        account-plugin-youtube::access-control
        aegis-certman-common-ca::CertCACommonAdd
        aegis-certman-common-ca::CertCAGlobalCodeSignAdd
        aegis-certman-common-ca::CertCASSLAdd
        aegis-certman-common-ca::CertCAWifiAdd
        aegis-certman-common-ca::CertCASMIMEAdd
        aegis-certman-common-ca::CertCACodeSignAdd
        aegis-certman-common-ca::CertUserSSLUse
        aegis-certman-common-ca::CertUserWifiUse
        aegis-certman-common-ca::CertUserSMIMEUse
        aegis-certman-common-ca::CertCACodeSignUse
        devicelock::ProvisioningSettings_PasswordForceChange
        devicelock::ProvisioningSettings_MinimalDeviceWipeTypeRequired
        devicelock::ProvisioningSettings_RnD_additional_Debug
        devicelock::DeviceLock_SetPassword
        devicelock::DeviceLockServiceOwn
        devicelock::DeviceLockStorageAccess
        devicelock::State_Unlocked
        devicelock::State_Locked
        devicelock::State_WipeMMC
        devicelock::State_Inhibit
        devicelock::DeviceLockControl
        devicelock::SSO_Exchange
        backup-framework::backup
        libaegis-session::aegis-session-data
        clean-device::CUDOrRFS
        system-ui-screenlock-nokia::ScreenLockEventPublish
        call-ui::call-ui
        duicontrolpanel-certificatesapplet::encryptedDBusMessages
        facebookqml::facebook-token
        mfe-account-ui-plugins::mfe-access
        mfe-account-ui-plugins::sso-encryption-token
        mms-manager::MmsProtectedWriteAccess
        mms-manager::MmsProtectedReadAccess
        mms-manager::MmsWorkerAccess
        libodnp::odnp
        libslpgw::slpgw
        location-ui::location-ui
        messaging-ui::messaging-ui
        ope-service0::OpeWapUtilAccess
        positioningd::LocationControl
        odnp-fpcd::odnp-fpcd
        signon-default-key-extension::key-storage
        signon-ui::signond-access
        telepathy-sasl-signon::sso-encryption-token
        telepathy-spirit::telepathy-spirit
        grob::grob-access
        grob::sso-encryption-token
        groovem-account-ui-plugins::groovem-access
        groovem-account-ui-plugins::sso-encryption-token
        nfcd::ui-agent
        nfcd::tool
        omb0::omb-communication
        npe-maemo0::LocationFW
        opensh::opensh
        SRC::com.nokia.maemo/local
        AID::com.nokia.maemo/local.opensh.
        account-plugin-skype::skype-access
        account-plugin-skype::sso-encryption-token

This is obviously a huge security hole. I'd also like know if this problem occurs when running opensh under an open-mode kernel.

I suggest that anyone using an incepted opensh locks down both /bin/opensh and /bin/open-sh executables with 700 permissions until this is sorted.