04-07-2011
I agree that based on the code you posted the suid bit looks useless. Maybe, in a earlier version of the program, there used to be a first paragraph of code that needed suid and it was removed leaving the situation you have today. Try turning off the suid bit and see if anything breaks.
10 More Discussions You Might Find Interesting
1. Programming
Hi all
I'm getting file info through stat( char *filename, struct stat *buf)
Taking all the file attributes to buf->st_mode,
How can i check the suid bit in there, if suid bit mask is 0004000??
Thank you all (1 Reply)
Discussion started by: solvman
1 Replies
2. Cybersecurity
Hi all,
Where can i find list of suid and gid files common for the system, let's say RedHat 7.1?
Thank you all
Regards
:D (1 Reply)
Discussion started by: solvman
1 Replies
3. UNIX for Dummies Questions & Answers
what is SUID ? can someone explain or point me to a link ?
thanks
simon2000 (2 Replies)
Discussion started by: simon2000
2 Replies
4. UNIX for Dummies Questions & Answers
good day!
i would just like to ask for advice regarding an lp problem i have..
we currently migrated a GIS appl from sol 2.6 to sol 8 but maintained the same version of jetadmin (for the appl plotters and printers). we are able to print files on a printer but not on a plotter. the... (1 Reply)
Discussion started by: maria_iris
1 Replies
5. UNIX for Advanced & Expert Users
Hi,
I have two file in my directory. "catter" file contains "cat ./file". And "file" contails "Hi ashish". I have SUID bit set for catter file. But when a different user in my group runs file catter, shell displays "Permission denied" message.
I just want to know can use of suid bit be... (3 Replies)
Discussion started by: shriashishpatil
3 Replies
6. Solaris
Hi all,
Thanks for all replays and for reading in advance (as per usual)
Anyhow I have been asked to come up with a list of programs that have SUID root permissions and also for any programs with SGID permissions. Has anyone got any idea with out going through each program indiviually how I... (2 Replies)
Discussion started by: B14speedfreak
2 Replies
7. UNIX for Advanced & Expert Users
Hi
Senario: I have previleges to edit a file F but User B does not have sufficient privs to edit it.
In order for B to edit it I tried an indirect way. I created a script to edit F and SUID this script so that B can execute it with the privs of me. But this is not working . can some one help... (3 Replies)
Discussion started by: Pankaj Mishra
3 Replies
8. UNIX for Dummies Questions & Answers
I'm writing this command/script to allow students to vi a private file of mine
in a private directory of mine. chmod 700 dir chmod 660 file
however since i own the directory and file; the script has to be ran by me so to speak, im just not sure how to set about doing this.
the script is... (5 Replies)
Discussion started by: StrengthThaDon
5 Replies
9. AIX
Hello,
I'm running AIX 6.1 box.
I tried to use suid on binary file but it doesn't work.
(I set suid on /usr/bin/sleep and tried to run it as user1(sleep owner is bin) - and program still runs as user1. It shoud run as bin isn't it ? - This test run as expected on Linux box)
Filesystem is... (3 Replies)
Discussion started by: vilius
3 Replies
10. UNIX for Dummies Questions & Answers
Hey guys,
Suppose i run passwd via bash shell. It is a suid program, which temporarily runs as root(owner) and modifies the user entries.
However, when i write a C file and give 4755 permission and root ownership to the 'a.out' file , it doesn't run as root in bash shell. I verified this by... (2 Replies)
Discussion started by: syncmaster
2 Replies
LEARN ABOUT PHP
fs_setcell
FS_SETCELL(1) AFS Command Reference FS_SETCELL(1)
NAME
fs_setcell - Configures permissions for setuid programs from specified cells
SYNOPSIS
fs setcell -cell <cell name>+ [-suid] [-nosuid] [-help]
fs setce -c <cell name>+ [-s] [-n] [-h]
DESCRIPTION
The fs setcell command sets whether the Cache Manager allows programs (and other executable files) from each cell named by the -cell
argument to run with setuid permission. By default, the Cache Manager allows programs from its home cell to run with setuid permission, but
not programs from any foreign cells. A program belongs to the same cell as the file server machine that houses the volume in which the
program's binary file resides, as specified in the file server machine's /etc/openafs/server/ThisCell file. The Cache Manager determines
its own home cell by reading the /etc/openafs/ThisCell file at initialization.
To enable programs from each specified cell to run with setuid permission, include the -suid flag. To prohibit programs from running with
setuid permission, include the -nosuid flag, or omit both flags.
The fs setcell command directly alters a cell's setuid status as recorded in kernel memory, so rebooting the machine is unnecessary.
However, non-default settings do not persist across reboots of the machine unless the appropriate fs setcell command appears in the
machine's AFS initialization file.
To display a cell's setuid status, issue the fs getcellstatus command.
CAUTIONS
AFS does not recognize effective UID: if a setuid program accesses AFS files and directories, it does so using the current AFS identity of
the AFS user who initialized the program, not of the program's owner. Only the local file system recognizes effective UID.
Only members of the system:administrators group can turn on the setuid mode bit on an AFS file or directory.
When the setuid mode bit is turned on, the UNIX "ls -l" command displays the third user mode bit as an "s" instead of an "x". However, the
"s" does not appear on an AFS file or directory unless setuid permission is enabled for the cell in which the file resides.
OPTIONS
-cell <cell name>+
Names each cell for which to set setuid status. Provide the fully qualified domain name, or a shortened form that disambiguates it from
the other cells listed in the local /etc/openafs/CellServDB file.
-suid
Allows programs from each specified cell to run with setuid privilege. Provide it or the -nosuid flag, or omit both flags to disallow
programs from running with setuid privilege.
-nosuid
Prevents programs from each specified cell from running with setuid privilege. Provide it or the -suid flag, or omit both flags to
disallow programs form running with setuid privilege.
-help
Prints the online help for this command. All other valid options are ignored.
EXAMPLES
The following command enables executable files from the State University cell to run with setuid privilege on the local machine:
% fs setcell -cell stateu.edu -suid
PRIVILEGE REQUIRED
The issuer must be logged in as the local superuser root.
SEE ALSO
fs_getcellstatus(1)
COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas
Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
OpenAFS 2012-03-26 FS_SETCELL(1)