ssdl-dev is a group ad I have it defined under ROOT.
You need to prefix it with %, then, which tells sudoers that it's a group and not a user.
Quote:
Code:
ssdl-dev ALL=NOPASSWD:./interface/master (N.B. there's the point)
when I save it and exit it tells me there's an error in the script.
It contains a relative path, which is also wrong. I'd be shocked if it allowed relative paths, since that's a blank cheque to run anything with that name with root permissions!
I repeat: Give sudo the absolute path. And run it with the absolute path.
Quote:
Regarding chmod 777 could you please explain me what's the difference between having a single file in chmod 777 and give to your user the sudo ability to run the same program?
The user it runs under, for one thing. 'chmod 777' doesn't let a normal user run a program as another user.
It does allow any user whatsoever to modify the file, though! If people are running it as root, you can see why this is a bad idea -- anyone could modify the script into something malicious for anyone else to blunder along and run as root!
You should learn what the UNIX file permissions actually mean, not treat everything with the sledgehammer 777.
I just updated sendmail to the newest version and got into this trouble. Somehow only can root can use sendmail while the other users will simply get "SMTP went away" when using pine or
"can not chdir(/var/spool/mqueue/): Permission denied
Program mode requires special privileges, e.g., root... (1 Reply)
Hi,
Please see this:
When i make a declaration as:
char *i, j, *k;
and then do
sprintf( k, "print.sh %s", i );
the program works fine.
But when i change the declaration to:
char *i, *k;
and then do
sprintf( k, "print.sh %s", i );
I get a segmentation fault at the 'sprintf'... (16 Replies)
Hi,
Currently, i have an application that does logging of messages into a text file and i record the timing for the messages in a format. However, i need to log the messages up to millisec level and the struct tm i am using now only support up to sec, is there any other way to get millisec?
... (2 Replies)
Hi,
Is it possible to write and run a shell script for specific directory( Apache/htdocs) that changes root privilege read/write to chmod 755 when a program uploads a file (word,PPT,XSL,..) to that directory
Thanks,
Mk (3 Replies)
Hi guys ,
This is the first time i m running java application inside linux.
i have installed jdk-6u20-linux-i586-rpm.bin jre-6u20-linux-i586-rpm.bin in my linux machine.
and set JAVA_HOME and JRE_HOME variables respectively.
# echo $JAVA_HOME
/usr/java/jdk1.6.0_20/
# echo $JRE_HOME... (6 Replies)
I'm extremely new to UNIX/Linux so apologies if I screw up the terminology.
I'm trying to figure out how to change the color of file names in BASH. For the most part I've got it working out but executable files are giving me some trouble.
I'd like a certain file type (*.inp) to be a... (4 Replies)
Hello all ,
i need some help asap
i have a program that keeps killing the machine
when i did google searches and 2 days later i ran strace
it seems the programm keeps making a system call to gettimeofday
to i guess increment a counter ?
gettimeofday({1347986584, 464904}, NULL) = 0... (6 Replies)
Hello,
I would like to build some sample C++ application on Solaris SunOS 5.8 Generic Virtual sun4v sparc.
so I would like to know what are the compilation utilities and runtime utilities I need to get in my machine
and will any one explain me the detaied life cycle of program like
what... (1 Reply)
Hi all,
I want to run a single command (gdm-restart) which has admin privileges as normal user.
I have done these below steps so for.
1. cp -p /usr/sbin/gdm-restart /usr/bin
2. chmod o+w /usr/bin
3. chown user /usr/bin.
But still not success. So kindly please let me know whether there is... (3 Replies)
I had a question in my test which asked where suppose user B has a program with 's' bit set. Can user A run this program and gain root privileges in any way?
I suppose not as the suid program run with privileges of owner and this program will run with B's privileges and not root. (1 Reply)
Discussion started by: syncmaster
1 Replies
LEARN ABOUT DEBIAN
pure-uploadscript
pure-uploadscript(8) Pure-FTPd pure-uploadscript(8)NAME
pure-uploadscript - Automatically run an external program after a successful upload
SYNTAX
pure-uploadscript [-p </path/to/pidfile>] [-B] [-g <gid>] [-h] -r <program to run> [-u <uid>]
DESCRIPTION
If Pure-FTPd is compiled with --with-uploadscript (default in binary distributions), and if the -o (or --uploadscript) is passed to the
server, a named pipe called /var/run/pure-ftpd.upload.pipe is created. You will also notice an important file called
/var/run/pure-ftpd.upload.lock, used for locking.
After a successful upload, the file name is written to the pipe.
pure-uploadscript reads this pipe to automatically run any program or script to process the newly uploaded file.
OPTIONS -B Daemonize the process and fork it in background.
-g <gid>
Switch the group ID to <gid>.
-h or --help
Display available options.
-r <program to run>
Tell what program/script to run. It has to be an absolute filename, the PATH environment variable is ignored. The first argument of
that program will be the unquoted name of the newly uploaded file. Environment variables aren't cleared. So don't put sensitive
data in them before calling pure-uploadscript if you switch uid.
-u <uid>
Switch the user ID to <uid>.
ENVIRONMENT
When the upload script is run, the name of the newly uploaded file is the first argument passed to the script (referenced as $1 by most
shells) . Some environment variables are also filled by useful info about the file. UPLOAD_SIZE The size of the file, in bytes.
UPLOAD_PERMS The permissions, as an octal integer. UPLOAD_UID The numerical UID of the owner. UPLOAD_GID The numerical GID of the owner.
UPLOAD_USER The login of the owner. UPLOAD_GROUP The group name the files belongs to. UPLOAD_VUSER The full user name, or the virtual
user name (127 chars max) .
FILES
/var/run/pure-ftpd.upload.pipe /var/run/pure-ftpd.upload.lock /var/run/pure-uploadscript.pid
SECURITY
pure-ftpd and pure-uploadscript are trying to limit security implications of such a feature.
- The pipe can only be created and opened by root. It must have perms 600, with uid 0, or it will be ignored.
- The argument passed to an external program/script is always an exact absolute path name. It doesn't get fooled by chroot()ed environ-
ments, and by absolute or relative paths added to the STOR command.
- UID and GID are set just after parsing command-line options, and pure-uploadscript never gets back supervisor privileges.
- Descriptors to the pipe are never passed to external programs/scripts. So when UID switched, the target user can't mess the pipe.
- Only regular files are processed, control characters are rejected, and a header+footer avoid partial file names.
- Two external programs/scripts can't run at the same time. Uploads are always processed sequentially, in chronological order. This is to
avoid denial-of-services by issuing a lot of simultaneous STOR commands in order to launch a fork bomb on the server. For this reason, your
programs shouldn't take a long time to complete (but they can run themselves in background) .
EXAMPLES
A sample script could be :
#! /bin/sh
echo "$1 uploaded" | /usr/bin/mutt -s "New upload : $1" ftpadmin@dom.ai.n
Never forget to quote ("variable") all variables in all your shell scripts to avoid security flaws.
AUTHORS
Frank DENIS <j at pureftpd dot org>
SEE ALSO ftp(1), pure-ftpd(8)pure-ftpwho(8)pure-mrtginfo(8)pure-uploadscript(8)pure-statsdecode(8)pure-pw(8)pure-quotacheck(8)pure-authd(8)
RFC 959, RFC 2228, RFC 2389 and RFC 2428.
Pure-FTPd team 1.0.36 pure-uploadscript(8)