Login or Register to Ask a Question and Join Our Community


Linux

grant root privileges to ordinary user

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Linux grant root privileges to ordinary user
# 1  
Old 09-08-2008
grant root privileges to ordinary user
Hi,
Is it possible to grant root privileges to an ordinary user?
Other than 'sudo', is there some way under Users/Groups configuration?
I want ordinary user to be able to mount, umount and use command mt.
/Brendan
# 2  
Old 09-08-2008
This is not a great idea - do you want smbmount or mount?
This makes the smbmount be setuid - it runs as the root user.
Code:
ln -s /usr/bin/smbmnt /bin/smbmnt
chmod u+s /usr/bin/smbmnt

This would let users mount (& unmount if you setuid the the other file-smbunmount) Windows SMB mounted filesystems. Which is possibly the only valid mount/unmount you would want users doing. Otherwise they could trash your system. setuid on anything like mount is both a security risk and an open can of worms, waiting to crawl out.
Last edited by jim mcnamara; 09-08-2008 at 01:04 PM..
# 3  
Old 09-08-2008
u can use the RBAC concept for ur idea.
create a role
create a user
modify the role to profile
modify the role to user
login as localuser
execute the command
# 4  
Old 09-08-2008
if its only to "mount" and "umount" then you can use the "users" option for the mount point in /etc/fstab
# 5  
Old 09-09-2008
From man mount :

Quote:
(iii) Normally, only the superuser can mount file systems. However, when fstab contains the user option on
a line, anybody can mount the corresponding system.

Thus, given a line
/dev/cdrom /cd iso9660 ro,user,noauto,unhide
any user can mount the iso9660 file system found on his CDROM using the command
mount /dev/cdrom
or
mount /cd
For more details, see fstab(5). Only the user that mounted a filesystem can unmount it again. If any user
should be able to unmount, then use users instead of user in the fstab line. The owner option is similar to
the user option, with the restriction that the user must be the owner of the special file. This may be use-
ful e.g. for /dev/fd if a login script makes the console user owner of this device. The group option is
similar, with the restriction that the user must be member of the group of the special file.
Regards
-AJ
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Can you gain root privileges if the suid program does not belong to root?

I had a question in my test which asked where suppose user B has a program with 's' bit set. Can user A run this program and gain root privileges in any way? I suppose not as the suid program run with privileges of owner and this program will run with B's privileges and not root. (1 Reply)
Discussion started by: syncmaster
1 Replies

2. HP-UX

User with root privileges in hp ux

hi, i am new in hp ux and i must create a user with root privileges and so i disable ssh connection from root login. thanks.. (6 Replies)
Discussion started by: eliste
6 Replies

3. Shell Programming and Scripting

Privileges like root

My English is no very good. I must make a bash scripting sh create like a backdoor, and when execute the script a user without privileges convert in super user or root, whithout introducing the password. In Spanish: Crear un script que sirva como puerta trasera al sistema, de manera que al... (1 Reply)
Discussion started by: kitievbr
1 Replies

4. Solaris

Grant print related privileges

Afternoon everyone, I would want to ask that how/what privileges i should grant to a new user so that the user can clear /disable printing job queue? Solaris OS: 5.9 Thanks. :b: (4 Replies)
Discussion started by: beginningDBA
4 Replies

5. Programming

Grant privileges in Oracle

i have installed oracle 10g and two databases. i enter database1 as sysdba and create a user called user1.i give the privileges as "select on" to user1. i enter sqlplus from the shell prompt. i enter as user1. but when i do "select * from emp" i have a "the table doesn't exist". how can i give... (3 Replies)
Discussion started by: symeje
3 Replies

6. UNIX for Dummies Questions & Answers

How to give an ordinary user the superuser (root) ID which is 0

How to give an ordinary user the superuser (root) ID which is 0 (9 Replies)
Discussion started by: sharaola
9 Replies

7. Shell Programming and Scripting

How do i change to super user then revert back to ordinary user ,using shell script?

Hi all, I am trying to eject the cdrom from a livecd after certain stage... Now assuming that it is possible to eject,please consider my issue!!! The OS boots into a regular user by default...so i am unable to use the eject command to push out the drive... However if i try pfexec eject it... (3 Replies)
Discussion started by: wrapster
3 Replies

8. UNIX for Dummies Questions & Answers

root privileges

Hello, As admin with root rights, to execute any command from another user without password-ask, I do : su - <user> -c "<cmd>" But how can I do to give the same rights to another physical user without using root user ? :confused: I've try to create another user "toor" with the same primary... (4 Replies)
Discussion started by: madmat
4 Replies

9. Shell Programming and Scripting

switching user from root to ordinary user

Good day Guys!!! I am currently making a script in AIX, the script runs a SAS job, the owner of the script is the root, but the SAS jobs cannot be run by the root, as it should be run by a user 'sasia'. But inside the script, root creates a logfile, so what I need is just to su to sasia for the... (3 Replies)
Discussion started by: sasia
3 Replies

10. Programming

root privileges

Hi I have make a program that needs root privleges but any user can try to run it, so what I want it is, when any user tries( other than root ) to run the program, an input prompt would open to enter root password ( if user knows ) and program will run ( otherwise exit ), and after completing... (21 Replies)
Discussion started by: sumsin
21 Replies
Login or Register to Ask a Question