06-15-2002
You guys gave me an idea with su, why let everyone run 'su' when only the users in the group 'wheel' should be able to run it.
I set su to the following permissions
-r-sr-s--- 1 root wheel 16384 Apr 13 17:08 /usr/bin/su*
(this is on openbsd 3.1 with a custom kernel)
I also had to chown root.wheel to allow people in the 'wheel' group to access 'su'. The default was root.bin.
Here are the following results;
uid=1004(taso) gid=1004(taso) groups=1004(taso)
bash-2.05$ su
bash: /usr/bin/su: Permission denied
and with a user in the wheel group;
uid=1000(crispexi) gid=1000(crispexi) groups=1000(crispexi), 0(wheel)
bash-2.05$ su
Password:
bash-2.05#
The way I set permissions;
chmod 6550 /usr/bin/su
chown root.wheel /usr/bin/su
and you're done.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Ok heres the situation
I've been studying Solaris 8 for about 6 months now and some things click in my head but others don't.
One of the things that don't click are file permissions.
For example I login at work and I use the ls -l command to get a long listing of the files w/ the permissions.... (2 Replies)
Discussion started by: eloquent99
2 Replies
2. UNIX for Dummies Questions & Answers
Is it possible to set owner to a group? I need to have a group own a process, because there will be 3 diffrent persons that will start and stop this process. They can not use the same users cause och back logging. we need to know who end when a certian user start/stops processes. (1 Reply)
Discussion started by: dozy
1 Replies
3. UNIX for Dummies Questions & Answers
What does the following permission indicate?
-rwSr----- 1 oracle dba 1536 Nov 7 17:05 orapwRTMDB
Thanks,
Rahul. (1 Reply)
Discussion started by: rahulrathod
1 Replies
4. UNIX for Dummies Questions & Answers
Hi,
When I listed one directory in Sun, it showed that :
-rwsr-xr-x 1 root bsmbin 78004 Oct 21 2004 bsmprsm
I don't know meaning of the character "s" in "rws" above. I have searched in Sun admin documents but no result. Would you please explain it ? :)
Thank you so much. (1 Reply)
Discussion started by: msg098
1 Replies
5. UNIX for Dummies Questions & Answers
Hi all,
I created testuser. by following command.
/usr/sbin/adduser -n test -d /disk05/collections/GET/testdata/
and then set its password by following command.
passwd testuser
When I login to system by testuser, it enters everything is ok.
The problem is how to set permission to this... (3 Replies)
Discussion started by: mr_bold
3 Replies
6. Ubuntu
Pictures by worthamtx - Photobucket
The URL is graphic view my present concern. Old partition working great sdb1
both appear on nautilus, both deliver icons to desk top. Based on the label handling of gparted results I tried following with success
sudo mkdir /media/disk/data
sudo chown... (1 Reply)
Discussion started by: 77yrold
1 Replies
7. UNIX for Dummies Questions & Answers
Hello
Whenever we want to oen any type of file by name, we must have execute perm. in each
dir. mentioned in the name. I changed the dir permission using chmod to test the validity of this statement.
but i still can open the file
-------
any guides would be appreciable (2 Replies)
Discussion started by: dr_mabuse
2 Replies
8. UNIX for Dummies Questions & Answers
I dont understand why permission changes are being such a pain in the bum even after I manually changed them through properties....Anyone know what to do here because even thoguh in properties the permissions make me local admin over in the Cygwin its not working..
... (5 Replies)
Discussion started by: okhawaja
5 Replies
9. Linux
I am using korn shell
When I type in Telnet on cmd line, I get message
"cannot execute"
How can I get permission to execute command ? In which dir is telnet located ? I looked in /usr/bin dir. but its not there
Thanks (1 Reply)
Discussion started by: paramshamnani
1 Replies
10. Ubuntu
Trying to get date into the txt file.
It says
Permission denied.
echo $(date +%I:%M:%S_%D) >> /tmp/systemd_suspend_test_err.txt
exec 2>> /tmp/systemd_suspend_test_err.txt
if ; then
# Do the thing you want before suspend here
echo "we are suspending $(date +%I:%M:%S_%D)."
elif ;... (5 Replies)
Discussion started by: drew77
5 Replies
LEARN ABOUT DEBIAN
pam_wheel
PAM_WHEEL(8) Linux-PAM Manual PAM_WHEEL(8)
NAME
pam_wheel - Only permit root access to members of group wheel
SYNOPSIS
pam_wheel.so [debug] [deny] [group=name] [root_only] [trust]
DESCRIPTION
The pam_wheel PAM module is used to enforce the so-called wheel group. By default it permits root access to the system if the applicant
user is a member of the wheel group. If no group with this name exist, the module is using the group with the group-ID 0.
OPTIONS
debug
Print debug information.
deny
Reverse the sense of the auth operation: if the user is trying to get UID 0 access and is a member of the wheel group (or the group of
the group option), deny access. Conversely, if the user is not in the group, return PAM_IGNORE (unless trust was also specified, in
which case we return PAM_SUCCESS).
group=name
Instead of checking the wheel or GID 0 groups, use the name group to perform the authentication.
root_only
The check for wheel membership is done only.
trust
The pam_wheel module will return PAM_SUCCESS instead of PAM_IGNORE if the user is a member of the wheel group (thus with a little play
stacking the modules the wheel members may be able to su to root without being prompted for a passwd).
MODULE TYPES PROVIDED
The auth and account module types are provided.
RETURN VALUES
PAM_AUTH_ERR
Authentication failure.
PAM_BUF_ERR
Memory buffer error.
PAM_IGNORE
The return value should be ignored by PAM dispatch.
PAM_PERM_DENY
Permission denied.
PAM_SERVICE_ERR
Cannot determine the user name.
PAM_SUCCESS
Success.
PAM_USER_UNKNOWN
User not known.
EXAMPLES
The root account gains access by default (rootok), only wheel members can become root (wheel) but Unix authenticate non-root applicants.
su auth sufficient pam_rootok.so
su auth required pam_wheel.so
su auth required pam_unix.so
SEE ALSO
pam.conf(5), pam.d(5), pam(7)
AUTHOR
pam_wheel was written by Cristian Gafton <gafton@redhat.com>.
Linux-PAM Manual 05/31/2011 PAM_WHEEL(8)