Change the privileges needed to run a program

 
Thread Tools Search this Thread
Operating Systems Linux Debian Change the privileges needed to run a program
# 8  
Old 11-17-2010
What I want is for everyone to be able to use that program, because it's going to be automated through a shell script and I have problem to code a way to give the SU password in the script, and I don't seem to be able to use expect on debian

---------- Post updated at 09:58 PM ---------- Previous update was at 09:35 PM ----------

I tried what McNamara suggested but for some weird reason is not working, has anyone some other idea?
# 9  
Old 11-23-2010
Hi everyone, I haven't been able to solve my problem. I'm now trying to run it through the sudo command.

In my /etc/sudoers i add this line :
ssdl-dev ALL=NOPASSWD:/interface/master
But when I exit su mode and I type the following command to run that specific program as sudo:
sudo ./interface/master
it prompts me for the password

Could you please indicate me what I did wrong?

Best
Lorenzo

Last edited by gaisselick87; 11-23-2010 at 07:03 PM..
# 10  
Old 11-23-2010
Is ssdl-dev a user or a group?

Make sure that line appears first, before any other lines relating to ssdl-dev or any groups it's in. sudo will use the first applicable line, even if there's a line further down that'd grant you higher access.

Also: there is an enormous difference between
Code:
/interface/master

and
Code:
./interface/master

Give sudo the absolute path, and run it with the absolute path.

Last edited by Corona688; 11-23-2010 at 08:22 PM..
# 11  
Old 11-23-2010
Quote:
Originally Posted by gaisselick87
Thanks for everything I found the answer I was looking for: chmod 777
there is never a good reason to use 777. if you don't believe me give me access to your system Smilie

---------- Post updated at 18:18 ---------- Previous update was at 18:17 ----------

please run sudo -l as the user and post the results
# 12  
Old 11-23-2010
ssdl-dev is a group ad I have it defined under ROOT.
The problems is if I define in sudoers the following path:
ssdl-dev ALL=NOPASSWD:./interface/master (N.B. there's the point)
when I save it and exit it tells me there's an error in the script.

Running the sudo -l command I get this:
(root) NOPASSWD: /interface/master
.

Regarding chmod 777 could you please explain me what's the difference between having a single file in chmod 777 and give to your user the sudo ability to run the same program? (Although the main reason I said I don't care is because once done with the initial setup the machine is completly isolated)

Best
Lorenzo
# 13  
Old 11-24-2010
Quote:
Originally Posted by gaisselick87
ssdl-dev is a group ad I have it defined under ROOT.
You need to prefix it with %, then, which tells sudoers that it's a group and not a user.

Quote:
Code:
ssdl-dev ALL=NOPASSWD:./interface/master (N.B. there's the point)

when I save it and exit it tells me there's an error in the script.
It contains a relative path, which is also wrong. I'd be shocked if it allowed relative paths, since that's a blank cheque to run anything with that name with root permissions!

I repeat: Give sudo the absolute path. And run it with the absolute path.

Quote:
Regarding chmod 777 could you please explain me what's the difference between having a single file in chmod 777 and give to your user the sudo ability to run the same program?
The user it runs under, for one thing. 'chmod 777' doesn't let a normal user run a program as another user.

It does allow any user whatsoever to modify the file, though! If people are running it as root, you can see why this is a bad idea -- anyone could modify the script into something malicious for anyone else to blunder along and run as root!

You should learn what the UNIX file permissions actually mean, not treat everything with the sledgehammer 777.
This User Gave Thanks to Corona688 For This Post:
# 14  
Old 11-25-2010
Thans for the help and the tips, btw for anyone who might stumble on this discussion the solution would be:
ssdl-dev ALL=NOPASSWD: /home/interface/master
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Can you gain root privileges if the suid program does not belong to root?

I had a question in my test which asked where suppose user B has a program with 's' bit set. Can user A run this program and gain root privileges in any way? I suppose not as the suid program run with privileges of owner and this program will run with B's privileges and not root. (1 Reply)
Discussion started by: syncmaster
1 Replies

2. UNIX for Dummies Questions & Answers

Command run with admin privileges

Hi all, I want to run a single command (gdm-restart) which has admin privileges as normal user. I have done these below steps so for. 1. cp -p /usr/sbin/gdm-restart /usr/bin 2. chmod o+w /usr/bin 3. chown user /usr/bin. But still not success. So kindly please let me know whether there is... (3 Replies)
Discussion started by: mastansaheb
3 Replies

3. Homework & Coursework Questions

C++ Environment needed on Solaris,Program lifecycle

Hello, I would like to build some sample C++ application on Solaris SunOS 5.8 Generic Virtual sun4v sparc. so I would like to know what are the compilation utilities and runtime utilities I need to get in my machine and will any one explain me the detaied life cycle of program like what... (1 Reply)
Discussion started by: Revathi R
1 Replies

4. Programming

Wrapper for unix program - urgent help needed

Hello all , i need some help asap i have a program that keeps killing the machine when i did google searches and 2 days later i ran strace it seems the programm keeps making a system call to gettimeofday to i guess increment a counter ? gettimeofday({1347986584, 464904}, NULL) = 0... (6 Replies)
Discussion started by: NetworkLearning
6 Replies

5. Shell Programming and Scripting

How to use dir_colors to change color of files with executable privileges

I'm extremely new to UNIX/Linux so apologies if I screw up the terminology. I'm trying to figure out how to change the color of file names in BASH. For the most part I've got it working out but executable files are giving me some trouble. I'd like a certain file type (*.inp) to be a... (4 Replies)
Discussion started by: Caerus
4 Replies

6. UNIX for Dummies Questions & Answers

Help needed to run simple java program in linux

Hi guys , This is the first time i m running java application inside linux. i have installed jdk-6u20-linux-i586-rpm.bin jre-6u20-linux-i586-rpm.bin in my linux machine. and set JAVA_HOME and JRE_HOME variables respectively. # echo $JAVA_HOME /usr/java/jdk1.6.0_20/ # echo $JRE_HOME... (6 Replies)
Discussion started by: pinga123
6 Replies

7. Shell Programming and Scripting

Change file privileges automatically

Hi, Is it possible to write and run a shell script for specific directory( Apache/htdocs) that changes root privilege read/write to chmod 755 when a program uploads a file (word,PPT,XSL,..) to that directory Thanks, Mk (3 Replies)
Discussion started by: mkohan
3 Replies

8. Programming

Help needed regarding c program

Hi, Currently, i have an application that does logging of messages into a text file and i record the timing for the messages in a format. However, i need to log the messages up to millisec level and the struct tm i am using now only support up to sec, is there any other way to get millisec? ... (2 Replies)
Discussion started by: dwgi32
2 Replies

9. Programming

Wierd C program. Help Needed

Hi, Please see this: When i make a declaration as: char *i, j, *k; and then do sprintf( k, "print.sh %s", i ); the program works fine. But when i change the declaration to: char *i, *k; and then do sprintf( k, "print.sh %s", i ); I get a segmentation fault at the 'sprintf'... (16 Replies)
Discussion started by: karthikb23
16 Replies

10. UNIX for Advanced & Expert Users

Can't use sendmail ( Program mode requires special privileges)

I just updated sendmail to the newest version and got into this trouble. Somehow only can root can use sendmail while the other users will simply get "SMTP went away" when using pine or "can not chdir(/var/spool/mqueue/): Permission denied Program mode requires special privileges, e.g., root... (1 Reply)
Discussion started by: Micz
1 Replies
Login or Register to Ask a Question