01-10-2005
I am a real noob when it comes to uid and everything that follows it
I need help asap guys
4 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
I compiled apache 1.3.33 with suexec support like
./configure \
"--with-layout=Apache" \
"--prefix=/usr/local/apache" \
"--enable-module=ssl" \
"--activate-module=src/modules/php4/libphp4.a" \
"--activate-module=src/modules/perl/libperl.a" \
"--enable-module=perl" \
"--enable-module=most"... (0 Replies)
Discussion started by: hassan1
0 Replies
2. UNIX for Advanced & Expert Users
Hi all,
I am trying to setup apache w/ suexec to avoid permission problems w/ apache user and website user and also to be able to run a second (test) domain on the same server.
So far I got fcgi w/o suexec running perfectly (logs confirm that). But as soon as I enable the suexec statement in the... (0 Replies)
Discussion started by: harrstar
0 Replies
3. UNIX for Dummies Questions & Answers
Hello guys
I'm trying to use Suexec in my computer. I've installed apache with default settings (so Suexec is installed with my emerge Apache , Gentoo) .
My settings on /etc/conf.d/apache2
# SUEXEC Enables running CGI scripts (in USERDIR) through suexec.
# USERDIR Enables /~username... (1 Reply)
Discussion started by: kernings
1 Replies
4. Shell Programming and Scripting
Hi,
I am using the below command in
suexec -u webuser /local/Tomcat7//0/tc7u/tomcat7.sh status
But it prompts for the password of executing user.
Let me know if any options available for passwordless or supplying password in script. (0 Replies)
Discussion started by: pravinbtech
0 Replies
LEARN ABOUT MOJAVE
pthread_setugid_np
PTHREAD_SETUGID_NP(2) BSD System Calls Manual PTHREAD_SETUGID_NP(2)
NAME
pthread_setugid_np -- Set the per-thread userid and single groupid.
SYNOPSIS
#include <sys/types.h>
#include <sys/unistd.h>
int
pthread_setugid_np(uid_t uid, gid_t gid);
DESCRIPTION
pthread_setugid_np() changes the current thread's effective, real, and saved userid and groupid to the requested userid and groupid ( uid and
gid , respectively) and clears all other groupids.
uid can be the current real userid, KAUTH_UID_NONE, or, if the caller is privileged, any userid. gid can be the current real groupid or, if
the caller is priviledged, any single groupid.
Setting uid to KAUTH_UID_NONE means to "revert to the per process credential".
CAVEATS
Temporarily restoring root privileges for a non-privileged process is only possible on a per-process basis and not a per-thread basis.
pthread_setugid_np() is not intended as a privilege escalation mechanism.
Do not use pthread_setugid_np.2() in a security sensitive situation.
RETURN VALUES
Upon successful completion, a value of 0 is returned. Otherwise, -1 is returned and the global variable errno is set to indicate the error.
ERRORS
pthread_setugid_np() fails if one or more of the following are true:
[EPERM] The calling process does not have the correct credentials to set the override identity (i.e. The current credentials do
not imply "super-user").
[EPERM] If uid is set to KAUTH_UID_NONE, the current thread must already be assuming another identity in order to revert back.
[EPERM] The current thread cannot already be assuming another identity.
SEE ALSO
setuid(2) setgid(2) seteuid(2) setegid(2)
BSD
October 1, 2008 BSD