Questions tagged [setuid]
36 questions
9
votes
1 answer
Why is chroot system call not available to non root user?
I was reading description about setuid on wikipedia
http://en.wikipedia.org/wiki/Setuid
I was unable to understand how chroot is related to setuid as mention in following paragraph from wikipedia
The presence of setuid executables explains why the…
Mr Coder
- 195
- 1
- 8
8
votes
4 answers
Set uid for windows
Is there an equivalent of set uid for windows(XP)? The 'run as' option requires admin password each time it runs. I want users to be able to run that particular executable without knowing admin password. I'm very much new to windows area. :(
Akilan
- 399
- 1
- 5
- 11
6
votes
4 answers
sudo: must be setuid root (Mac OS X)
I ran
$ sudo chown -R $USER /usr/bin
and now when I try to run programs under the /usr/bin path as sudo I get
sudo:must be setuid root
What should I do if I would like to revert the chown?
jerome
- 203
- 1
- 2
- 6
6
votes
3 answers
sudo or acl or setuid/setgid?
for a reason I do not really understand, everyone wants sudo for all and everything. At work we even have as many entries as there are way to read a logfile (head/tail/cat/more, ...).
I think, sudo is defeating here.
I'd rather use a mix of…
Xavier Maillard
- 201
- 2
- 4
5
votes
5 answers
(Ubuntu) setuid bash doesn't work
Here is the code:
(root:)
# mkdir /test
# cp /bin/bash /test/sbash
# chmod a+s /test/sbash
(user1:)
$ cd /test
$ ./sbash
$ mkdir trycreate
mkdir: cannot create directory `trycreate': Permission denied
And bash scripts with setuid bit set not…
Xiè Jìléi
- 782
- 7
- 13
- 27
5
votes
1 answer
How do you run a PHP script as the file's owner, rather than as the webserver user?
I'm sure there's a well-known answer for this, but I can't seem to find it.
How do I make a user's PHP scripts (in ~user/public_html, for example), run as the owner rather than as (eg) www-data?
Assume Apache, Linux, and PHP 5.
jes5199
- 367
- 1
- 4
- 8
5
votes
1 answer
Linux 2.6.32 Centos 6.4 setuid() fail / security changes?
After recently updating to CentOS 6.4, two machines have setuid() restrictions which act like either capabilities or selinux, however both are disabled. E.g. the following fails:
[root@host statd]# perl -e 'use POSIX;…
Patrick
- 61
- 6
5
votes
1 answer
How can I use SetUID on a shell script to run as a non-root user?
Our company's server is running Ubuntu 12.04 (Precise) and Apache 2. We have a custom, internal web application installed. I have a bash script which pulls any updates to that app from source control to the server. Only one user on the system (the…
Jazz
- 153
- 1
- 4
4
votes
3 answers
Cannot write to CIFS share as non-root user - CentOS 6
I'm working on a system recently migrated to CentOS 6 from CentOS 4.9. There is a CIFS mount from a Windows 2008 server that existed on the old system. The raw mountpoint has 777 directory permissions.
[root@Bootylicious ~]# ls -ld…
ewwhite
- 194,921
- 91
- 434
- 799
3
votes
3 answers
What's the safest way to kick off a root-level process via cgi on an Apache server?
The problem: I have a script that runs periodically via a cron job as root, but I want to give people a way to kick it off asynchronously too, via a webpage. (The script will be written to ensure it doesn't run overlapping instances or such.)
I…
MartyMacGyver
- 167
- 3
- 11
3
votes
2 answers
Upload only SFTP with OpenSSH and Linux?
I'd like to set up a chrooted SFTP server with upload only privileges.
Back in the day, I know I've done this with FTP on FreeBSD through the use of SETUID. All uploaded files were automatically owned by root with others having write only…
PunchMonkey
- 101
- 1
- 4
3
votes
4 answers
Mapping UIDs for NFS
I have a Mac OS X file server that serves via SMB/CIFS and AFP. The server is a domain client via the golden triangle approach, but this results in a very large UID for the users. This is fine for my current setup, but I'd like to get NFS working…
churnd
- 3,977
- 5
- 33
- 41
3
votes
1 answer
Selective setuid root or running an application as root ? (web server/cgi context)
Well we have an in house server manager (like Webmin, only more specific), comprising of a bunch of C CGI programs and CGI Perl scripts, some of which require root privileges (adding system users, managing passwords, dealing with mail queues etc. )…
Mohit Chawla
- 486
- 1
- 4
- 11
2
votes
1 answer
Running a shell script with its owner's privileges
On a Debian (5.0.3) server I have a user svnsync who owns a certain shell script:
-rwsrwsr-x 1 svnsync users 119 Dec 21 13:45 mirror-svn.sh
I'd like everyone in the users group to be able to execute this script with svnsync's privileges. This is…
Jonik
- 2,911
- 4
- 37
- 48
2
votes
0 answers
Best practice for setuid and setgid in /root and user directories
ZFS allows to created datasets with setuid turned off, which (AFAIK) means that setuid bit can't be set on files stored in those datasets.
Assume now that there are two datasets, one for the /root and one for the /home directories. Would it make any…
Greg
- 198
- 10