To:blowtorch - Setuid uid/euid issue

9 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

What keeps me from abusing setuid(0) and programs with setuid bit set?

Just learning about the privilege escalation method provided by setuid. Correct me if I am wrong but what it does is change the uid of the current process to whatever uid I set. Right ? So what stops me from writing my own C program and calling setuid(0) within it and gaining root privileges ? ...

2. Solaris

Need help with setuid.

Hi Gurus, I need your suggestions,to implement setuid. Here is the situation. I have a user xyz on a solaris zone.He needs to install a package using a pkgadd command but i guess only a root can run that .Is there any way I can set the setuid bit on the pkgadd which is in the location...

3. UNIX for Dummies Questions & Answers

Changing the user id or euid of the shell itself

Hi all, Ok, bear with me on this one, I am a bit new to Unix and it might take me a little bit of time to articulate my question. I know that every process has a user id and an effective user id. This seems to include the shell itself, because when I type 'ps', I see 'bash' listed as a...

4. Solaris

rbac and execution attributes (uid and euid)

Hi all, I have a question to see if I understand the euid and uid attributes correctly for rbac (/etc/security/exec_attr): All: * Audit Control: /etc/init.d/audit euid=0, egid=3 /etc/security/bsmconv uid=0 /etc/security/bsmunconv uid=0 /usr/sbin/audit euid=0 /usr/sbin/auditconfig...

5. Red Hat

euid and egid frpm proc

hi, can anyone tell me where can i find euid and egid from /proc file system in RHEL 4? i read stat file, but i got only uid and gid, and cudnot find any entry regarding euid and egid.please suggest... thanks, sanjay

6. Solaris

EUID set for all non-root users

We have a Solaris box. I noticed that whenever any non-root user logins into the box and issues the command id the output is (for example) uid=42568(sam) gid=1245(sam) euid=0(root) egid=2(bin). I have not given any privileges to anyone explicitly. When I issued ls -l in the /usr/bin directory I...

7. UNIX for Dummies Questions & Answers

setuid

could u plz give me clear idea of spcial permissions setuid,getuid and striky bit .

8. UNIX for Advanced & Expert Users

Setuid Program with (-rwsr-sr-x 1 root other ) UID/EUID issue

Hi, I have a program with the following suid setup -rwsr-sr-x 1 root other 653 Aug 16 17:00 restart_server It basically starts up a service that has to be started by root. I just want the normal users to be able to restart the service using the script above. But when the...

9. UNIX for Advanced & Expert Users

setuid

I have a C wrapper programme which basically execute a shell script. The shell script has 700 as permission and oracle is owner of the shell script. The C execuatble has 4711 permission so that means that it has setuid bit set and group and others can execute the C executable. The reason why I am...

LEARN ABOUT REDHAT

setuid

SETUID(2)						     Linux Programmer's Manual							 SETUID(2)

NAME

       setuid - set user identity

SYNOPSIS

       #include <sys/types.h>
       #include <unistd.h>

       int setuid(uid_t uid);

DESCRIPTION

       setuid  sets the effective user ID of the current process.  If the effective userid of the caller is root, the real and saved user ID's are
       also set.

       Under Linux, setuid is implemented like the POSIX version with the _POSIX_SAVED_IDS feature.  This allows a setuid (other than  root)  pro-
       gram to drop all of its user privileges, do some un-privileged work, and then re-engage the original effective user ID in a secure manner.

       If  the	user is root or the program is setuid root, special care must be taken. The setuid function checks the effective uid of the caller
       and if it is the superuser, all process related user ID's are set to uid.  After this has occurred, it is impossible  for  the  program	to
       regain root privileges.

       Thus, a setuid-root program wishing to temporarily drop root privileges, assume the identity of a non-root user, and then regain root priv-
       ileges afterwards cannot use setuid.  You can accomplish this with the (non-POSIX, BSD) call seteuid.

RETURN VALUE

       On success, zero is returned.  On error, -1 is returned, and errno is set appropriately.

ERRORS

       EPERM  The user is not the super-user, and uid does not match the real or saved user ID of the calling process.

CONFORMING TO

       SVr4, SVID, POSIX.1.  Not quite compatible with the 4.4BSD call, which sets all of the real, saved, and effective user IDs.  SVr4 documents
       an additional EINVAL error condition.

LINUX-SPECIFIC REMARKS
       Linux  has the concept of filesystem user ID, normally equal to the effective user ID.  The setuid call also sets the filesystem user ID of
       the current process.  See setfsuid(2).

       If uid is different from the old effective uid, the process will be forbidden from leaving core dumps.

SEE ALSO

       getuid(2), setreuid(2), seteuid(2), setfsuid(2)

Linux 1.1.36							    1994-07-29								 SETUID(2)

UNIX for Dummies Questions & Answers