You need setuid - the program has to belong to root or whoever you su to.
Assume your file is named "myfile" someuser is whover you su to - could be root
This will work ONLY if the filesystem where you have "myfile", will allow setuid. The chmod 4711 command sets setuid, and sets permissions to 711. to do a setgid try chmod 2711 [filename]. You do this if having group permissions lets the program run correctly.
Note: setuid programs unless written REALLY well are a security risk.
I just updated sendmail to the newest version and got into this trouble. Somehow only can root can use sendmail while the other users will simply get "SMTP went away" when using pine or
"can not chdir(/var/spool/mqueue/): Permission denied
Program mode requires special privileges, e.g., root... (1 Reply)
Hi,
Please see this:
When i make a declaration as:
char *i, j, *k;
and then do
sprintf( k, "print.sh %s", i );
the program works fine.
But when i change the declaration to:
char *i, *k;
and then do
sprintf( k, "print.sh %s", i );
I get a segmentation fault at the 'sprintf'... (16 Replies)
Hi,
Currently, i have an application that does logging of messages into a text file and i record the timing for the messages in a format. However, i need to log the messages up to millisec level and the struct tm i am using now only support up to sec, is there any other way to get millisec?
... (2 Replies)
Hi,
Is it possible to write and run a shell script for specific directory( Apache/htdocs) that changes root privilege read/write to chmod 755 when a program uploads a file (word,PPT,XSL,..) to that directory
Thanks,
Mk (3 Replies)
Hi guys ,
This is the first time i m running java application inside linux.
i have installed jdk-6u20-linux-i586-rpm.bin jre-6u20-linux-i586-rpm.bin in my linux machine.
and set JAVA_HOME and JRE_HOME variables respectively.
# echo $JAVA_HOME
/usr/java/jdk1.6.0_20/
# echo $JRE_HOME... (6 Replies)
I'm extremely new to UNIX/Linux so apologies if I screw up the terminology.
I'm trying to figure out how to change the color of file names in BASH. For the most part I've got it working out but executable files are giving me some trouble.
I'd like a certain file type (*.inp) to be a... (4 Replies)
Hello all ,
i need some help asap
i have a program that keeps killing the machine
when i did google searches and 2 days later i ran strace
it seems the programm keeps making a system call to gettimeofday
to i guess increment a counter ?
gettimeofday({1347986584, 464904}, NULL) = 0... (6 Replies)
Hello,
I would like to build some sample C++ application on Solaris SunOS 5.8 Generic Virtual sun4v sparc.
so I would like to know what are the compilation utilities and runtime utilities I need to get in my machine
and will any one explain me the detaied life cycle of program like
what... (1 Reply)
Hi all,
I want to run a single command (gdm-restart) which has admin privileges as normal user.
I have done these below steps so for.
1. cp -p /usr/sbin/gdm-restart /usr/bin
2. chmod o+w /usr/bin
3. chown user /usr/bin.
But still not success. So kindly please let me know whether there is... (3 Replies)
I had a question in my test which asked where suppose user B has a program with 's' bit set. Can user A run this program and gain root privileges in any way?
I suppose not as the suid program run with privileges of owner and this program will run with B's privileges and not root. (1 Reply)
Discussion started by: syncmaster
1 Replies
LEARN ABOUT XFREE86
fs_setcell
FS_SETCELL(1) AFS Command Reference FS_SETCELL(1)NAME
fs_setcell - Configures permissions for setuid programs from specified cells
SYNOPSIS
fs setcell -cell <cell name>+ [-suid] [-nosuid] [-help]
fs setce -c <cell name>+ [-s] [-n] [-h]
DESCRIPTION
The fs setcell command sets whether the Cache Manager allows programs (and other executable files) from each cell named by the -cell
argument to run with setuid permission. By default, the Cache Manager allows programs from its home cell to run with setuid permission, but
not programs from any foreign cells. A program belongs to the same cell as the file server machine that houses the volume in which the
program's binary file resides, as specified in the file server machine's /etc/openafs/server/ThisCell file. The Cache Manager determines
its own home cell by reading the /etc/openafs/ThisCell file at initialization.
To enable programs from each specified cell to run with setuid permission, include the -suid flag. To prohibit programs from running with
setuid permission, include the -nosuid flag, or omit both flags.
The fs setcell command directly alters a cell's setuid status as recorded in kernel memory, so rebooting the machine is unnecessary.
However, non-default settings do not persist across reboots of the machine unless the appropriate fs setcell command appears in the
machine's AFS initialization file.
To display a cell's setuid status, issue the fs getcellstatus command.
CAUTIONS
AFS does not recognize effective UID: if a setuid program accesses AFS files and directories, it does so using the current AFS identity of
the AFS user who initialized the program, not of the program's owner. Only the local file system recognizes effective UID.
Only members of the system:administrators group can turn on the setuid mode bit on an AFS file or directory.
When the setuid mode bit is turned on, the UNIX "ls -l" command displays the third user mode bit as an "s" instead of an "x". However, the
"s" does not appear on an AFS file or directory unless setuid permission is enabled for the cell in which the file resides.
OPTIONS-cell <cell name>+
Names each cell for which to set setuid status. Provide the fully qualified domain name, or a shortened form that disambiguates it from
the other cells listed in the local /etc/openafs/CellServDB file.
-suid
Allows programs from each specified cell to run with setuid privilege. Provide it or the -nosuid flag, or omit both flags to disallow
programs from running with setuid privilege.
-nosuid
Prevents programs from each specified cell from running with setuid privilege. Provide it or the -suid flag, or omit both flags to
disallow programs form running with setuid privilege.
-help
Prints the online help for this command. All other valid options are ignored.
EXAMPLES
The following command enables executable files from the State University cell to run with setuid privilege on the local machine:
% fs setcell -cell stateu.edu -suid
PRIVILEGE REQUIRED
The issuer must be logged in as the local superuser root.
SEE ALSOfs_getcellstatus(1)COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas
Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
OpenAFS 2012-03-26 FS_SETCELL(1)