12-09-2008
how can I find all tool which can setuid like chmod
for security issue ,i would like to find all privilege tools that can setuid
how to do this
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I've got 100 directories that each have 2 directories with in them.
Structered like this:
/home/domains/domain1/
through to
/home/domains/domain100/
and those 2 directories mentioned above are here:
/home/domains/domain1/directory1/
/home/domains/domain1/directory2/
through to... (7 Replies)
Discussion started by: Neko
7 Replies
2. UNIX for Advanced & Expert Users
Hello to all Unix gurus..
I am writing a generic script which takes the options of unix command as input and concatenate all the pieces and forms a complete executable command.
I am getting an error with the following command as I am resetting my own permission on the root directory. When the... (4 Replies)
Discussion started by: sdlayeeq
4 Replies
3. Shell Programming and Scripting
About System and Perl: Sun Solaris 5.9 sparc, Perl 5.6.1
I've decided to use the perl file::find module to look for all the SETUID and SETGID files on my unix boxes. I wrote something like this: (I've shorted it a little to make it simple)
#!/opt/perl/bin/perl
use File::Find;
find... (1 Reply)
Discussion started by: x96riley3
1 Replies
4. Shell Programming and Scripting
I am trying to change permission for all subdirectories and files inside folder1 so this is what i came with after many seraches on the internet. man find and man chmod mirc and few articles.
find .public_html/folder1 -print0 | xargs -0 chmod 777
what's wrong with this command?
it is FTP... (33 Replies)
Discussion started by: smoother
33 Replies
5. HP-UX
how can I find defalut connection browser and default mail tool
if i installed three browser ,and two mail tools
how can I find my default connection browser and default mail tool (1 Reply)
Discussion started by: alert0919
1 Replies
6. UNIX Desktop Questions & Answers
I would like to list files with setuid and setgid set up. I used the find command, but I got a lot of permission denied error. I tried to redirect the error to the hole it does not work. I used the command string below
find . -type f \( -perm -4000 -o -perm -2000 \) -exec ls {} \; 2>/dev/null... (3 Replies)
Discussion started by: Pouchie1
3 Replies
7. UNIX and Linux Applications
i think it is the same in both... Iam i right? (1 Reply)
Discussion started by: sumaiya
1 Replies
8. Shell Programming and Scripting
Hello everyone, my friend is asking for yOur Help. He is asking the script for combined find and changemode utility... Thank you (4 Replies)
Discussion started by: iennetastic
4 Replies
9. UNIX for Dummies Questions & Answers
I have a folder called "test" and this folder contains lots of other folders as sub folders, i intend to search for all file ending with .bin and then change the files to executable please how do i do this
---------- Post updated at 10:48 AM ---------- Previous update was at 10:42 AM ----------... (3 Replies)
Discussion started by: oyesiji
3 Replies
10. UNIX for Beginners Questions & Answers
Just learning about the privilege escalation method provided by setuid. Correct me if I am wrong but what it does is change the uid of the current process to whatever uid I set. Right ?
So what stops me from writing my own C program and calling setuid(0) within it and gaining root privileges ?
... (2 Replies)
Discussion started by: sreyan32
2 Replies
LEARN ABOUT DEBIAN
fs_setcell
FS_SETCELL(1) AFS Command Reference FS_SETCELL(1)
NAME
fs_setcell - Configures permissions for setuid programs from specified cells
SYNOPSIS
fs setcell -cell <cell name>+ [-suid] [-nosuid] [-help]
fs setce -c <cell name>+ [-s] [-n] [-h]
DESCRIPTION
The fs setcell command sets whether the Cache Manager allows programs (and other executable files) from each cell named by the -cell
argument to run with setuid permission. By default, the Cache Manager allows programs from its home cell to run with setuid permission, but
not programs from any foreign cells. A program belongs to the same cell as the file server machine that houses the volume in which the
program's binary file resides, as specified in the file server machine's /etc/openafs/server/ThisCell file. The Cache Manager determines
its own home cell by reading the /etc/openafs/ThisCell file at initialization.
To enable programs from each specified cell to run with setuid permission, include the -suid flag. To prohibit programs from running with
setuid permission, include the -nosuid flag, or omit both flags.
The fs setcell command directly alters a cell's setuid status as recorded in kernel memory, so rebooting the machine is unnecessary.
However, non-default settings do not persist across reboots of the machine unless the appropriate fs setcell command appears in the
machine's AFS initialization file.
To display a cell's setuid status, issue the fs getcellstatus command.
CAUTIONS
AFS does not recognize effective UID: if a setuid program accesses AFS files and directories, it does so using the current AFS identity of
the AFS user who initialized the program, not of the program's owner. Only the local file system recognizes effective UID.
Only members of the system:administrators group can turn on the setuid mode bit on an AFS file or directory.
When the setuid mode bit is turned on, the UNIX "ls -l" command displays the third user mode bit as an "s" instead of an "x". However, the
"s" does not appear on an AFS file or directory unless setuid permission is enabled for the cell in which the file resides.
OPTIONS
-cell <cell name>+
Names each cell for which to set setuid status. Provide the fully qualified domain name, or a shortened form that disambiguates it from
the other cells listed in the local /etc/openafs/CellServDB file.
-suid
Allows programs from each specified cell to run with setuid privilege. Provide it or the -nosuid flag, or omit both flags to disallow
programs from running with setuid privilege.
-nosuid
Prevents programs from each specified cell from running with setuid privilege. Provide it or the -suid flag, or omit both flags to
disallow programs form running with setuid privilege.
-help
Prints the online help for this command. All other valid options are ignored.
EXAMPLES
The following command enables executable files from the State University cell to run with setuid privilege on the local machine:
% fs setcell -cell stateu.edu -suid
PRIVILEGE REQUIRED
The issuer must be logged in as the local superuser root.
SEE ALSO
fs_getcellstatus(1)
COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas
Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
OpenAFS 2012-03-26 FS_SETCELL(1)