vyos-op-run lost SUID bit after vyos-utils merge to the vyos-1x
Steps to reproduce:
set system login operator-group operator command-policy allow 'show *' set system login user foo authentication encrypted-password 'xxx' set system login user foo operator group 'operator' commit
Log in as foo and run show version
Expected: The command output is shown.
Actual: Nothing is printed for any command. Admin users are not affected, because they go through sudo.
foo@r14> show interfaces foo@r14> foo@r14> show ip neighbors foo@r14> foo@r14> show version foo@r14>
That repo's debian/vyos-utils.postinst did this:
chmod u+s /usr/bin/vyos-op-run
But vyos-1x.postinst doesn’t