help with user permission Post: 302104006

Sponsored Content

Top Forums Shell Programming and Scripting help with user permission Post 302104006 by Perderabo on Tuesday 23rd of January 2007 12:07:07 AM

01-23-2007

Administrator Emeritus

Quote:

Originally Posted by nathan

Most systems don't honor setuid/setgid on scripts. My Linux system at home doesn't, and I don't believe HP-UX or AIX do either.

However, Solaris does honor setuid scripts. A setuid script will open an unclosable security hole on most systems. Solaris has the fd file system and uses it to close that particular hole.

I too think that sudo is right way to go here; so I have been reluctant to mention another option. But now that I'm here... Let's say that we have three users whose processes need to be killed:
moe (uid=1025)
larry (uid=1026)
curly (uid=1027)
And we want shemp (uid=1028) to be able to kill processes owned only by moe, larry, and curly. We create a group called "killers" with a gid of, say, 1500; and we make shemp a member of that group. Now, we

Code:

mkdir /usr/local/killcmds
for user in moe larry curly ; do
       cp /usr/bin/kill /usr/local/killcmds/kill${user}
       chown $user /usr/local/killcmds/kill${user} 
       chgrp killers /usr/local/killcmds/kill${user}
       chmod 4050 /usr/local/killcmds/kill${user}
done

Now /usr/local/killcmds has a private kill command for each killable user. It is setuid to the target and it can be executed only by members of the killers group. These kill commands are enough, but I would also develop a script as a front end that invokes the correct kill command. I have not tested this, but I believe that it will work.

Perderabo

View Public Profile for Perderabo

Find all posts by Perderabo

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

How to give permission for a specified user

Hi All, How can i give permission for a specific user ( eg. admin ) ? I tried with chmod admin+r prog.sh which doesnt work. Is there any way i can specify a user's name and give the permission? Thanks in advance. Saneesh Joseph.

2. Shell Programming and Scripting

start a program with other user's permission

I have some of programs in unix system which are to started with one_user say "xxxx". I have sudo permission if i start these programs with sudo it shows root permission. But i want these programs permession should be "xxxx". I tried "su user_name -c Program_name" but it is not...

3. UNIX for Dummies Questions & Answers

User permission

Hi all, I created testuser. by following command. /usr/sbin/adduser -n test -d /disk05/collections/GET/testdata/ and then set its password by following command. passwd testuser When I login to system by testuser, it enters everything is ok. The problem is how to set permission to this...

4. AIX

Permission to a external user to a file

Is there any possible way to give permission to a user to a file whose not a member of that group. Also the permission of the file shouls be given only to that USER but not all OTHERS. Thanks in Advance for ur replies/suggestions...

5. UNIX for Dummies Questions & Answers

Granting user permission for public_html

I have problem giving user access to his public_html directory. While when I am logged as root I can access my files by going to www.myserver.com/file.htmlwhere file.html is actually on this path... var/www/file.htmlBut when user tries to access his file.html on this path.... ~user/file.html it...

6. Solaris

User want to full root permission

hi guys.. how to give root permission for particular user tel me step by step

7. Shell Programming and Scripting

Need help with user rights (Permission denied)

I have a script that do read data for Munin Graph. My problem is that it have some reading problems, and I do not know how to fix it. script traf.sh (its not the complete script)#!/bin/sh PORT="80" NETDEVICE="eth0" IPTRAFlogdir="/var/log/iptraf" ...

8. UNIX for Dummies Questions & Answers

Special Permission for a user

Hi, I'm newbie to unix. There is a directory, say Testing/ under /home/user1. I have created a user by the name check. I was looking for a way to give the above user read & execute access only to this directory Testing/ while for other remaining files,directories,etc this user...

9. Red Hat

User permission access

Hi folks, I am trying to grant the access like below items using the setfacl command, but i couldn't achieve as what I required. any other possibility. username : testing Readonly access in /form_dl/system/prd/logs Write only access in /form_dl/system/prd/deploy No access to other...

10. UNIX for Beginners Questions & Answers

Setting write permission for particular user

Hi All, We have a scenario in production where we want only one user from a group to modify the file. The file is not set to write permission for application manager. -r--r--r-- 1 amgr u00 15661716 Aug 30 00:06 DCI.dat So here amgr will have permission to edit the file. We want a...

LEARN ABOUT CENTOS

sulogin

SULOGIN(8)						       System Administration							SULOGIN(8)

NAME

       sulogin - Single-user login

SYNOPSIS

       sulogin [options] [tty]

DESCRIPTION

       sulogin is invoked by init when the system goes into single user mode.

       The user is prompted:

	    Give root password for system maintenance
	    (or type Control-D for normal startup):

       sulogin	will  be  connected  to  the  current terminal, or to the optional tty device that can be specified on the command line (typically
       /dev/console).

       After the user exits the single-user shell or presses control-D at the prompt, the system will continue to boot.

OPTIONS

       -e, --force
	      If the default method of obtaining the root password via getpwnam(3)  from  the  system  fails,  manually  examine  /etc/passwd  and
	      /etc/shadow to get the password.	If they are damaged or nonexistent, sulogin will start a root shell without asking for a password.

	      Only use the -e option if you are sure the console is physically protected against unauthorized access.

       -p, --login-shell
	      Specifying this option causes sulogin to start the shell process as a login shell.

       -t, --timeout seconds
	      Specify the maximum amount of time to wait for user input.  By default, sulogin will wait forever.

       -h, --help
	      Print a help message.

       -V, --version
	      Output version.

ENVIRONMENT VARIABLES

       sulogin looks for the environment variable SUSHELL or sushell to determine what shell to start.	If the environment variable is not set, it
       will try to execute root's shell from /etc/passwd.  If that fails it will fall back to /bin/sh.

AUTHOR

       sulogin was written by Miquel van Smoorenburg for sysvinit and later ported to util-linux by Dave Reisner and Karel Zak.

AVAILABILITY

       The sulogin command is part of the util-linux package and is available  from  Linux  Kernel  Archive  <ftp://ftp.kernel.org/pub/linux/utils
       /util-linux/>.

util-linux							     Jul 2012								SULOGIN(8)

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

How to give permission for a specified user

Discussion started by: saneeshjose

2. Shell Programming and Scripting

start a program with other user's permission

Discussion started by: srikanthus2002

3. UNIX for Dummies Questions & Answers

User permission

Discussion started by: mr_bold

4. AIX

Permission to a external user to a file

Discussion started by: ksailesh