11-24-2011
Setting permissions for shell scripts
Hi,
I have written a shell script which calls a java program which reads properties from a configuration file and writes to a log file for each session.However the customer wants that the user should not be able to open/edit the configuration file or the log files meaning they should not have any rights on the files.
I tried setting the user id of the shell script giving the user permission to run the script as root so that the owner of the script,configuration file and log file directory is root,and the user will not normally be able to access the said files.However it seems that setuid is not working as it still shows that permission is denied to access the files.However when I set uid on the java executable I was able to run the script without any problems.However that opens another security issue as the java executable can be used by anyone to run any java code compromising the security further.I am working on a Sun Solaris box(namely OSS-RC).
I am in a fix.It would be great if you were able to help me out in this.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Hi,
I am setting up an area on a unix server where multiple people will be editing web pages. Can anyone tell me how to set it up the directory and subdirectories so that when a user creates a new file, it defaults to permissions of 664 or 775?
I've tried using umask but from what I can... (1 Reply)
Discussion started by: robbieg
1 Replies
2. AIX
Hi,
Please give me the detailed Differences between writing Unix Shell script and AIX Shell Scripts. Thanks in advance..... (0 Replies)
Discussion started by: haroonec
0 Replies
3. UNIX for Dummies Questions & Answers
Hi,
I'm in the process of writing a system (in Java) where a user can register to become a member of a website.
When they register, a collection of directories and files get created by the application.
For example if a user with the name 'fred' registered they would get the following
drwxr-xr-x... (0 Replies)
Discussion started by: andrewpmoore
0 Replies
4. UNIX for Dummies Questions & Answers
I've been told I need to set the permissions for everything in the htdocs folder to 777, but how do I go about doing this?
Thanks:o (9 Replies)
Discussion started by: thehaapyappy
9 Replies
5. UNIX for Dummies Questions & Answers
Hi all,
I have user called "Z". The home directory is /home/Z. I have another directory /home/Z/OP. Within /home/Z/OP, i have 2 directories
/home/Z/OP/OP1 and /home/Z/OP2.
I want to restrict access for Z to only access
/home/Z/OP and
/home/Z/OP1 and
/home/Z/OP2.
What kind of... (4 Replies)
Discussion started by: new2ss
4 Replies
6. UNIX for Dummies Questions & Answers
I'm trying to setup a directory structure for my staff which enables them full access to files in the directories with their name, and have access to anything in the shared directory. The directory structure looks like this:
root@www10 # ls -l
total 56
drwxr-xr-x 7 internal internal 4096... (3 Replies)
Discussion started by: v_greg
3 Replies
7. UNIX for Advanced & Expert Users
What would be a practical way of making sure files I upload to/edit in a particular directory on a server always have the correct group permissions?
I'm forgetful, so I try to automate things like chgrp'ing the files when I'm done. I could write a script to be run by cron. Is that the only way,... (2 Replies)
Discussion started by: mregine
2 Replies
8. Shell Programming and Scripting
I've got a number of people sending files to me in different directory structures, and users on many different groups who need access to these incoming paths.
My problem is that umask assumes a default of 666 for files. No execute bit, meaning that my users can't even see the incoming folders.... (2 Replies)
Discussion started by: Karunamon
2 Replies
9. Shell Programming and Scripting
Hello All,
I am in the process of finding the permissions on all the files that exists in two directories:
Dir1: PROD_Scripts/*
Dir2: STAGE_Scripts/*
Both the Directories have some shell and perl scripts respectively.
Step1: Finding all the Scripts that exists in PROD but Not in STAGE.... (2 Replies)
Discussion started by: filter
2 Replies
10. UNIX for Dummies Questions & Answers
I'm working in a linux server where wrappers are executed by multiple users of different groups. The log and output files are created with 554 permissions by default. This is stopping other users to run the wrappers unless the log and output files are deleted or given 777 permission. Setting SUID... (1 Reply)
Discussion started by: praveenpa
1 Replies
LEARN ABOUT DEBIAN
airport2-portinspector
AIRPORT2-PORTINSPECTOR(1) General Commands Manual AIRPORT2-PORTINSPECTOR(1)
NAME
airport2-portinspector - Port maps inspector for the Apple AirPort Extreme Base Station ("Snow")
SYNOPSIS
airport2-portinspector
DESCRIPTION
airport2-portinspector allows you to inspect the port maps used by the hosts associated with your base station.
OPTIONS
airport2-portinspector accepts no command-line options. airport2-portinspector is a wrapper script around the PortInspector.jar jar file
located in /usr/share/java/airport-utils.
You can set the JAVACMD environment variable to use a specific JVM instead of the one chosen by the wrapper script. Set the DEBUG environ-
ment variable to 1 to get the debug output from the wrapper script.
ENVIRONMENT VARIABLES
DEBUG Set this variable to 1 to get the debug output from the wrapper script.
JAVACMD
The full path to the Java Virtual Machine to use. By default, the wrapper uses JAVACMD; if it is not set, it looks for
JAVA_BINDIR/java, then for JAVA_HOME/bin/java before looking for a java executable in the PATH. In the latter case, the JVM used can
be configured using the Debian alternatives system (see update-alternatives(8)).
JAVA_HOME
The full path where your JDK/JRE is installed.
JAVA_BINDIR
The full path to the directory where the java executable is located.
JAVA_ARGS
Extra command-line arguments to be passed to the Java Virtual Machine.
AUTHOR
airport2-portinspector was written by Jon Sevy <jsevy@cs.drexel.edu>.
This manual page was written by Julien BLACHE <jblache@debian.org>, for the Debian project (but may be used by others).
May 20, 2006 AIRPORT2-PORTINSPECTOR(1)