01-03-2014
sudoers is owned by root, that's an administrative obstacle here.
I have understood that LD_LIBRARY_PATH is set after the suid - and that should work!
Please test with the env command (not print/echo that works for internal variables, too)!
Further, your setuidbinary.c might need a
setuid(geteuid())
.
9 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
I need to find all the files that have group Read or Write permission or files that have user write permission.
This is what I have so far:
find . -exec ls -l {} \; | awk '/-...rw..w./ {print $1 " " $3 " " $4 " " $9}'
It shows me all files where group read = true, group write = true... (5 Replies)
Discussion started by: shunter63
5 Replies
2. Solaris
Hi
my directory not accepting any commands. its simply telling permission denied. i tried ( cp, mv, rm ) as roor
i want to set default permissons to this DIR
please find the Logs below.
dr-xr-xr-x 1 root root 1 Jun 1 09:04 AP1_ROP ( original dir)
root> chmod 777... (5 Replies)
Discussion started by: vijayq8
5 Replies
3. Shell Programming and Scripting
Hi,
The requirement is like,
the program needs 2 argument one is user_id and second one is directory path. My script will check if that user_id has write access to the directory path. The directory path may be in any file system like AFS or NFS.
Can any one please suggest some points to... (1 Reply)
Discussion started by: siba.s.nayak
1 Replies
4. Shell Programming and Scripting
Guys, i wanna get any user files with write permission (on user or group permission) for review but i confuse with -perm parameter.
any body can help me to explain what is that mean?
thank's (1 Reply)
Discussion started by: michlix
1 Replies
5. Shell Programming and Scripting
I want to check access rights permissions not for 'user', not for 'group', but for 'others'.
I want to do it by system command in which i want to use 'ls -l' and 'awk' command.
I have written the following program :
#!/usr/bin/local/perl
#include <stdlib.h>
system ("ls -l | awk... (1 Reply)
Discussion started by: shubhamsachdeva
1 Replies
6. UNIX for Dummies Questions & Answers
Hi,
I have a shell script(test.sh) and need to give execute permission for this shell script to user group
cobr_sftp and oracle.
Could you please help as to how to give this permission.
I have already given full access(777) to script test.sh. Does this mean all the users/user group can access... (1 Reply)
Discussion started by: abhi_123
1 Replies
7. Web Development
Hi
I am trying to make a web program which is command line equivalent. i have done the coding in cgi program in perl and html for basic forms to take inputs. when i ran the program from web application i see permission denied messages. after analyzing i found apache is running as wwwrun which... (2 Replies)
Discussion started by: rakeshkumar
2 Replies
8. UNIX for Beginners Questions & Answers
Hi All,
We have a scenario in production where we want only one user from a group to modify the file. The file is not set to write permission for application manager.
-r--r--r-- 1 amgr u00 15661716 Aug 30 00:06 DCI.dat
So here amgr will have permission to edit the file. We want a... (10 Replies)
Discussion started by: arunkumar_mca
10 Replies
9. AIX
I have searched this quite a long time but couldn't find the right method for me to use. I need to assign read write permission to the user for specific directories and it's sub directories and files. I do not want to use ACL. I do not want to assign user the same group of that directories too.... (0 Replies)
Discussion started by: blinkingdan
0 Replies
LEARN ABOUT X11R4
fs_setcell
FS_SETCELL(1) AFS Command Reference FS_SETCELL(1)
NAME
fs_setcell - Configures permissions for setuid programs from specified cells
SYNOPSIS
fs setcell -cell <cell name>+ [-suid] [-nosuid] [-help]
fs setce -c <cell name>+ [-s] [-n] [-h]
DESCRIPTION
The fs setcell command sets whether the Cache Manager allows programs (and other executable files) from each cell named by the -cell
argument to run with setuid permission. By default, the Cache Manager allows programs from its home cell to run with setuid permission, but
not programs from any foreign cells. A program belongs to the same cell as the file server machine that houses the volume in which the
program's binary file resides, as specified in the file server machine's /etc/openafs/server/ThisCell file. The Cache Manager determines
its own home cell by reading the /etc/openafs/ThisCell file at initialization.
To enable programs from each specified cell to run with setuid permission, include the -suid flag. To prohibit programs from running with
setuid permission, include the -nosuid flag, or omit both flags.
The fs setcell command directly alters a cell's setuid status as recorded in kernel memory, so rebooting the machine is unnecessary.
However, non-default settings do not persist across reboots of the machine unless the appropriate fs setcell command appears in the
machine's AFS initialization file.
To display a cell's setuid status, issue the fs getcellstatus command.
CAUTIONS
AFS does not recognize effective UID: if a setuid program accesses AFS files and directories, it does so using the current AFS identity of
the AFS user who initialized the program, not of the program's owner. Only the local file system recognizes effective UID.
Only members of the system:administrators group can turn on the setuid mode bit on an AFS file or directory.
When the setuid mode bit is turned on, the UNIX "ls -l" command displays the third user mode bit as an "s" instead of an "x". However, the
"s" does not appear on an AFS file or directory unless setuid permission is enabled for the cell in which the file resides.
OPTIONS
-cell <cell name>+
Names each cell for which to set setuid status. Provide the fully qualified domain name, or a shortened form that disambiguates it from
the other cells listed in the local /etc/openafs/CellServDB file.
-suid
Allows programs from each specified cell to run with setuid privilege. Provide it or the -nosuid flag, or omit both flags to disallow
programs from running with setuid privilege.
-nosuid
Prevents programs from each specified cell from running with setuid privilege. Provide it or the -suid flag, or omit both flags to
disallow programs form running with setuid privilege.
-help
Prints the online help for this command. All other valid options are ignored.
EXAMPLES
The following command enables executable files from the State University cell to run with setuid privilege on the local machine:
% fs setcell -cell stateu.edu -suid
PRIVILEGE REQUIRED
The issuer must be logged in as the local superuser root.
SEE ALSO
fs_getcellstatus(1)
COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas
Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
OpenAFS 2012-03-26 FS_SETCELL(1)