Allow user without dir write permission to execute a script that creates files Post: 302882044

Sponsored Content

Top Forums UNIX for Advanced & Expert Users Allow user without dir write permission to execute a script that creates files Post 302882044 by waavman on Friday 3rd of January 2014 06:28:37 PM

01-03-2014

Registered User

Hello MadeInGermany,

As suggested by you i used env and here is an interesting observation
Inside testremove.ksh I added the following lines

Code:

#!/usr/bin/ksh
export LD_LIBRARY_PATH=/app/asset_control_shared/DEV1_acdev1_usl20028171/ac/lib
echo "LD_LIBRARY_PATH using echo====$LD_LIBRARY_PATH"echo "Printing LD_LIBRARY_PATH value using env begins"
env|egrep '(HISTSIZE|LD_LIBRARY_PATH)'echo "Printing LD_LIBRARY_PATH value using env end"
/app/asset_control_shared/DEV1_acdev1_usl20028171/ac/bin/waitdb.ORACLE

First I remove setuid on invoke_shellscripts binary as below (owner acdev1)

Code:

-rwxr-x--x 1 acdev1 rdgac 8612 Jan  3 11:53 invoke_shellscripts
-rwxr-x--- 1 acdev1 rdgac  526 Jan  3 18:11 testremove.ksh

Then as another user acdev2 I ran from commandline

Code:

./invoke_shellscripts ./testremove.ksh

I got the following output:

Code:

LD_LIBRARY_PATH using echo====/app/asset_control_shared/DEV1_acdev1_usl20028171/ac/lib
Printing LD_LIBRARY_PATH value using env begins
HISTSIZE=1000
LD_LIBRARY_PATH=/app/asset_control_shared/DEV1_acdev1_usl20028171/ac/lib
Printing LD_LIBRARY_PATH value using env end

Now I added setuid bit to invoke_shellscripts binary as follows

Code:

-rwsr-x--x 1 acdev1 rdgac 8612 Jan  3 11:53 invoke_shellscripts
-rwxr-x--- 1 acdev1 rdgac  526 Jan  3 18:11 testremove.ksh

Now I reran this from command line

Code:

./invoke_shellscripts ./testremove.ksh

And this time I got following output suggesting that when setuid bit is set, LD_LIBRARY_PATH is ignored. As you can see echo correctly prints the value of LD_LIBRARY_PATH set in the 1st line of the script however env doesnot have it. It shows only HISTSIZE from the env|egrep command.

Code:

LD_LIBRARY_PATH using echo====/app/asset_control_shared/DEV1_acdev1_usl20028171/ac/lib
Printing LD_LIBRARY_PATH value using env begins
HISTSIZE=1000
Printing LD_LIBRARY_PATH value using env end

testremove.ksh is the one that will be calling the 3rd party binary that uses the library libuidata.so located in /app/asset_control_shared/DEV1_acdev1_usl20028171/ac/lib. How do you think this problem can be fixed using setuid( geteuid()) ?

thanks

Last edited by bartus11; 01-03-2014 at 07:49 PM.. Reason: Use code tags, please!

waavman

View Public Profile for waavman

Find all posts by waavman

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Find all files with group read OR group write OR user write permission

I need to find all the files that have group Read or Write permission or files that have user write permission. This is what I have so far: find . -exec ls -l {} \; | awk '/-...rw..w./ {print $1 " " $3 " " $4 " " $9}' It shows me all files where group read = true, group write = true...

2. Solaris

cant able to change permission in a DIR as root user

Hi my directory not accepting any commands. its simply telling permission denied. i tried ( cp, mv, rm ) as roor i want to set default permissons to this DIR please find the Logs below. dr-xr-xr-x 1 root root 1 Jun 1 09:04 AP1_ROP ( original dir) root> chmod 777...

3. Shell Programming and Scripting

write permission to a perticular user to a directory

Hi, The requirement is like, the program needs 2 argument one is user_id and second one is directory path. My script will check if that user_id has write access to the directory path. The directory path may be in any file system like AFS or NFS. Can any one please suggest some points to...

4. Shell Programming and Scripting

search any user files with write permission

Guys, i wanna get any user files with write permission (on user or group permission) for review but i confuse with -perm parameter. any body can help me to explain what is that mean? thank's

5. Shell Programming and Scripting

perl script to check read/write/execute permission for 'others'

I want to check access rights permissions not for 'user', not for 'group', but for 'others'. I want to do it by system command in which i want to use 'ls -l' and 'awk' command. I have written the following program : #!/usr/bin/local/perl #include <stdlib.h> system ("ls -l | awk...

6. UNIX for Dummies Questions & Answers

Provide execute permission to a user

Hi, I have a shell script(test.sh) and need to give execute permission for this shell script to user group cobr_sftp and oracle. Could you please help as to how to give this permission. I have already given full access(777) to script test.sh. Does this mean all the users/user group can access...

7. Web Development

Apache write permission issues to another user owned directory

Hi I am trying to make a web program which is command line equivalent. i have done the coding in cgi program in perl and html for basic forms to take inputs. when i ran the program from web application i see permission denied messages. after analyzing i found apache is running as wwwrun which...

8. UNIX for Beginners Questions & Answers

Setting write permission for particular user

Hi All, We have a scenario in production where we want only one user from a group to modify the file. The file is not set to write permission for application manager. -r--r--r-- 1 amgr u00 15661716 Aug 30 00:06 DCI.dat So here amgr will have permission to edit the file. We want a...

9. AIX

Assign read write permission to the user for specific dir and it's sub dir and files in AIX

I have searched this quite a long time but couldn't find the right method for me to use. I need to assign read write permission to the user for specific directories and it's sub directories and files. I do not want to use ACL. I do not want to assign user the same group of that directories too....

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Find all files with group read OR group write OR user write permission

Discussion started by: shunter63

2. Solaris

cant able to change permission in a DIR as root user

Discussion started by: vijayq8

3. Shell Programming and Scripting

write permission to a perticular user to a directory

Discussion started by: siba.s.nayak

4. Shell Programming and Scripting

search any user files with write permission

Discussion started by: michlix

5. Shell Programming and Scripting

perl script to check read/write/execute permission for 'others'

Discussion started by: shubhamsachdeva

6. UNIX for Dummies Questions & Answers

Provide execute permission to a user

Discussion started by: abhi_123

7. Web Development

Apache write permission issues to another user owned directory

Discussion started by: rakeshkumar

8. UNIX for Beginners Questions & Answers

Setting write permission for particular user

Discussion started by: arunkumar_mca

9. AIX

Assign read write permission to the user for specific dir and it's sub dir and files in AIX

Discussion started by: blinkingdan