Login or Register to Ask a Question and Join Our Community


AIX

sudo must be setuid root.

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems AIX sudo must be setuid root.
# 1  
Old 02-24-2010
sudo must be setuid root.
Guy's

I'm trying to add some lines in sudo by useing this command visudo

Code:
 
 
 
# User privilege specification
root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
 
%sysadmin ALL=(root) /usr/sbin/shutdown,/usr/bin/topas,/usr/bin/svmon,/usr/bin/lsof,/opt/sarcheck/bin/sarcheck,/usr/bin/stopsrc,/usr
/sbin/fuser,/usr/sbin/umount,/usr/sbin/mount,/usr/bin/chown,/usr/bin/chmod,/usr/bin/find,/usr/bin/mksysb,/usr/bin/truss,/usr/sbin/tc
pdump,/usr/bin/vmstat,/usr/sbin/varyoffvg,/usr/sbin/exportvg,/usr/sbin/varyonvg,/usr/sbin/importvg
 
 
:wq!
 
when I try to save I'm getting the belwo
 
"/etc/sudoers.tmp" 31 lines, 945 characters 
>>> sudoers file: syntax error, line 29 <<<
>>> sudoers file: syntax error, line 30 <<<
What now? \
Options are:
(e)dit sudoers file again
e(x)it without saving changes to sudoers file
(Q)uit and save changes to sudoers file (DANGER!)
What now?

when I try to run sudo -l

I'm getting the below ?

Code:
Sorry, sudo must be setuid root.


Please help me in this regard and advices ....
ITHelper
# 2  
Old 02-24-2010
It means what it says. The permissions of the sudo executable are incorrect for some reason, preventing it from running as root, preventing it from changing users. On my system(not AIX) sudo's permissions are:
Code:
$ ls -l /usr/bin/sudo
---s--x--x 1 root root 139528 2008-07-06 17:35 /usr/bin/sudo
$

# 3  
Old 02-25-2010
Quote:
"/etc/sudoers.tmp" 31 lines, 945 characters
>>> sudoers file: syntax error, line 29 <<<
>>> sudoers file: syntax error, line 30 <<<
What now? \
Options are:
(e)dit sudoers file again
e(x)it without saving changes to sudoers file
(Q)uit and save changes to sudoers file (DANGER!)
What now?
Your sudoers file has syntax error.
You must resolve them before you proceed with sudo -l
# 4  
Old 02-27-2010
This is my permissions still I'm getting the same ?!! can you please advices in this regard ....

Code:
P690_server/>ls -l /usr/bin/sudo
lrwxrwxrwx    1 root     system           27 Aug 18 2009  /usr/bin/sudo -> ../../opt/freeware/bin/sudo

P690_server>sudo -l
Sorry, sudo must be setuid root.

Last edited by ITHelper; 02-27-2010 at 11:02 AM..
ITHelper
# 5  
Old 02-27-2010
Quick question: did you really, really read the thread so far? And why do you think the permissions on a link even remotely influence the file linked to?

Check the permissions for /opt/freeware/bin/sudo. If that's a link too, follow it again. Repeat until you encounter a regular file. That needs to have 3 certain attributes:
  • it has to be owned by the user root
  • it has to have the sticky bit set (chmod u+s as root)
  • it has to be executable for those allowed to use it
# 6  
Old 02-28-2010
Thank you very match .......

problem was in the owner of this file /opt/freeware/bin/sudo

---s--x--x 1 bin bin 114730 Jul 07 2005 /opt/freeware/bin/sudo

chown root:system /opt/freeware/bin/sudo

ls -la /opt/freeware/bin/sudo

---s--x--x 1 root system 114730 Jul 07 2005 /opt/freeware/bin/sudo


sudo is working fain now ................ solved
ITHelper
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Sudo to root, but keep my own aliases?

I have a coworker that has set up some funky aliases in /etc/bash.alias, and he insists on leaving them that way. For example he aliased "ll" to "ls -lahtr", which really bugs me. Anyway, I was wondering if there were a way for me to sudo to root without reading /etc/bash.alias, or maybe have... (6 Replies)
Discussion started by: paqman
6 Replies

2. UNIX for Beginners Questions & Answers

What keeps me from abusing setuid(0) and programs with setuid bit set?

Just learning about the privilege escalation method provided by setuid. Correct me if I am wrong but what it does is change the uid of the current process to whatever uid I set. Right ? So what stops me from writing my own C program and calling setuid(0) within it and gaining root privileges ? ... (2 Replies)
Discussion started by: sreyan32
2 Replies

3. Solaris

Sudo access of rm to non-root user

Hello, It is Solaris-10. There is a file as /opt/vpp/dom1.2/pdd/today_23. It is always generated by root, so owned by root only. This file has to be deleted as part of application restart always and that is done by app_user and SA is always involved to do rm on that file. Is it possible to give... (9 Replies)
Discussion started by: solaris_1977
9 Replies

4. Red Hat

Sudo to user other than root but do not allow sudo to root

I have a set of RHEL 5 boxes running our ERP software on Oracle databases. I need to allow my DBA's to su to oracle and one other account (banner) without knowing the oracle or banner password. But I need to prevent them from su'ing to any other user especially root. I only want them to be able to... (1 Reply)
Discussion started by: westmoreland
1 Replies

5. UNIX for Dummies Questions & Answers

sudo on becoming root

Anyone able to explain why if i run "sudo -i" or "sudo -s" i am able to get into root by just keying my own password? How to avoid this from happening coz i need all the users to use su - only. (2 Replies)
Discussion started by: timmywong
2 Replies

6. UNIX for Dummies Questions & Answers

Sudo to delegate permission from non-root user to another non-root user

I've been through many threads before i decide to create a separate thread. I can't really find the solution to my (simple) problem. Here's what I'm trying to achieve: As "canar" user I want to run a command, let's say "/opt/ocaml/bin/ocaml" as "duck" user. The only to achieve this is to... (1 Reply)
Discussion started by: canar
1 Replies

7. UNIX for Dummies Questions & Answers

sudo/root access

I'm actually working with a Ubuntu-System here and have a question about executing a command with 'sudo'. I tried and got a error message like "not allowed". After this I logged in with 'sudo -s' and typed the command without 'sudo'. This worked well. Can please somebody explain me this... (0 Replies)
Discussion started by: daWonderer
0 Replies

8. UNIX for Advanced & Expert Users

Setuid Program with (-rwsr-sr-x 1 root other ) UID/EUID issue

Hi, I have a program with the following suid setup -rwsr-sr-x 1 root other 653 Aug 16 17:00 restart_server It basically starts up a service that has to be started by root. I just want the normal users to be able to restart the service using the script above. But when the... (7 Replies)
Discussion started by: 0ktalmagik
7 Replies

9. Linux

sudo, root password

Hi all.. I'm secering a RH 2.1 server, with gnome (not my choice...), as X manager. Is ther anyway to get sudo ask for root password other then the actual user's password? Like when you launch the graphical IHM to create a new user, it asks for root's password? Is there a way to do the same... (5 Replies)
Discussion started by: penguin-friend
5 Replies

10. UNIX for Dummies Questions & Answers

Setuid root and chown

I am trying to run chown and chmod from a script owned by root. The permissions are set to 4755 so that users can execute the script as root. However, when I run the script as a user other than root, I get "Operation not permitted" for both chown and chmod. Any ideas as to why this is? (6 Replies)
Discussion started by: johnmsucpe
6 Replies
Login or Register to Ask a Question