The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
26 views

Best practice for setuid and setgid in /root and user directories

ZFS allows to created datasets with setuid turned off, which (AFAIK) means that setuid bit can't be set on files stored in those datasets. Assume now that there are two datasets, one for the /root ...
0
votes
0answers
150 views

sudo NFS SUID not working

Today I decided to move my NFS files from an ext4 HDD to an ext2 HDD using mc. Since then I am having trouble running the sudo command on all clients. When I try to run it I get an error saying "...
-1
votes
3answers
31 views

Is there a way to allow an apache2 logged in user to access a specific directory dynamically?

This is surprisingly a very difficult problem to solve. I want to allow my Linux users to login to Apache2 and have access to their own directory(ies) only. I've managed to get Linux users to ...
0
votes
1answer
107 views

How to rsync to remote machine with user1 for ssh and user2 as remote rsyncer?

UPDATE: it seems I have to use rsync modules. So I created a very simple rsyncd.conf in the home of user2 on the remote server with: [test] path = /dest It does not work, but the problem seems ...
0
votes
0answers
63 views

Elevated privileges for non-modifiable install script

I need to give permission to a local user to run an installation script that requires root privilege. So I created a special group in which this user is a member of and gave the permissions to the ...
0
votes
2answers
515 views

Apache Per-user web directories under user's own ID instead of www-data?

Talking about this feature http://httpd.apache.org/docs/current/howto/public_html.html Is there a way (HOW?) to have Apache take on (setuid) the ID of each "~user", instead of doing everything under ...
7
votes
1answer
733 views

Why is chroot system call not available to non root user?

I was reading description about setuid on wikipedia http://en.wikipedia.org/wiki/Setuid I was unable to understand how chroot is related to setuid as mention in following paragraph from wikipedia ...
1
vote
1answer
197 views

Is the following setuid program a security risk?

I have the following program in .c set as setuid chmod only read/execute by owner and will set it immutable, as i will the php script it invokes. #include <stdio.h> #include <stdlib.h> #...
2
votes
1answer
502 views

Amazon EC2 Ubuntu and upstart logging permissions

I have set up this upstart script on a Amazon Ec2 Ubuntu 12.04 TLS instance for executing a node.js application. The script uses setuid and setgid. It works fine without using setuid and setgid but ...
1
vote
1answer
321 views

SETUID / SETGID on a binary executable stopped working following upgrade of Fedora Core

I have a C program that needs access to a protected directory full of stuff.strong text The idea is that only the program or the administrator have access. In the past on Linux platforms, I've used ...
5
votes
1answer
1k views

Linux 2.6.32 Centos 6.4 setuid() fail / security changes?

After recently updating to CentOS 6.4, two machines have setuid() restrictions which act like either capabilities or selinux, however both are disabled. E.g. the following fails: [root@host statd]# ...
0
votes
1answer
684 views

Prevent setuid from dropping setcap user privileges (VirtualBox)

I'm trying to run a web server from a headless, NAT'd VirtualBox guest. VirtualBox needs to bind to port 80, but the only way to do so is by running VirtualBox as root. To get around this, I tried ...
1
vote
1answer
967 views

Unable to su into any user

After I have fiddled with the folders /usr/bin, /usr/lib and /usr/lib64 I restored them, but was not able to su into root (and probably other accounts too): Permissions on the password database may ...
3
votes
3answers
2k views

What's the safest way to kick off a root-level process via cgi on an Apache server?

The problem: I have a script that runs periodically via a cron job as root, but I want to give people a way to kick it off asynchronously too, via a webpage. (The script will be written to ensure it ...
2
votes
1answer
70 views

How to start/stop service with Apache2 on Ubuntu

Using Apache, I'd like to be able to start and stop a service on the same server. Essentially, I'm looking for a way to allow Apache (or some script called by Apache) to call sudo service XXXX start. ...
2
votes
0answers
308 views

checksecurity / setuid changes, is this a bug or did somebody break in?

I received a mail by checksecurity from my ubuntu 12.04 server with the following content: --- setuid.today 2012-06-03 06:48:09.892436281 +0200 +++ /var/log/setuid/setuid.new.tmp 2012-06-17 06:47:...
3
votes
1answer
3k views

How can I use SetUID on a shell script to run as a non-root user?

Our company's server is running Ubuntu 12.04 (Precise) and Apache 2. We have a custom, internal web application installed. I have a bash script which pulls any updates to that app from source control ...
0
votes
2answers
870 views

SETUID Permission Denied

I have been learning Linux from few days, and now I was trying to learn the advanced file permissions like setting UID, GID and sticky bit. At root I have first changed the ownership of directory to ...
5
votes
4answers
6k views

sudo: must be setuid root (Mac OS X)

I ran $ sudo chown -R $USER /usr/bin and now when I try to run programs under the /usr/bin path as sudo I get sudo:must be setuid root What should I do if I would like to revert the chown?
4
votes
3answers
10k views

Cannot write to CIFS share as non-root user - CentOS 6

I'm working on a system recently migrated to CentOS 6 from CentOS 4.9. There is a CIFS mount from a Windows 2008 server that existed on the old system. The raw mountpoint has 777 directory permissions....
3
votes
2answers
2k views

Upload only SFTP with OpenSSH and Linux?

I'd like to set up a chrooted SFTP server with upload only privileges. Back in the day, I know I've done this with FTP on FreeBSD through the use of SETUID. All uploaded files were automatically ...
2
votes
1answer
817 views

When is appropriate to remove setuid/setgid privileges from an app?

I've been skimming through the NSA suggestions for hardening Mac OS X and Linux and noticed this little tidbit of info: Setuid programs run with the privileges of the file's owner (which is often ...
0
votes
4answers
3k views

How to make default owner for all files and directories in folder

I want all new files created in one folder to have an owner called user1 How can I do that?
3
votes
1answer
399 views

Selective setuid root or running an application as root ? (web server/cgi context)

Well we have an in house server manager (like Webmin, only more specific), comprising of a bunch of C CGI programs and CGI Perl scripts, some of which require root privileges (adding system users, ...
0
votes
1answer
1k views

How does MySQL run as user “_mysql” on Mac?

On Mac, MySQL seems to save data as the "_mysql" user. Can somebody please explain how this is achieved. I would have expected the MySQL server application (mysqld) to have the setuid flag set, so ...
2
votes
2answers
2k views

Adding a new user into linux from a script

I am using a customized Redmine installation to manage projects. I have managed to hook the addition of new users and send the login information to a bash script I have. Below is my script: #!/bin/sh ...
5
votes
3answers
2k views

sudo or acl or setuid/setgid?

for a reason I do not really understand, everyone wants sudo for all and everything. At work we even have as many entries as there are way to read a logfile (head/tail/cat/more, ...). I think, sudo ...
1
vote
1answer
861 views

Running a shell script with its owner's privileges

On a Debian (5.0.3) server I have a user svnsync who owns a certain shell script: -rwsrwsr-x 1 svnsync users 119 Dec 21 13:45 mirror-svn.sh I'd like everyone in the users group to be able to ...
2
votes
5answers
11k views

(Ubuntu) setuid bash doesn't work

Here is the code: (root:) # mkdir /test # cp /bin/bash /test/sbash # chmod a+s /test/sbash (user1:) $ cd /test $ ./sbash $ mkdir trycreate mkdir: cannot create directory `trycreate': Permission ...
0
votes
5answers
2k views

Setuid not working on Solaris

I have a Perl script marked setuid, but when I run it, it says I don't have permission to do so. I am running Solaris 10. This works on another system but I can't tell whats different. What am I ...
8
votes
4answers
9k views

Set uid for windows

Is there an equivalent of set uid for windows(XP)? The 'run as' option requires admin password each time it runs. I want users to be able to run that particular executable without knowing admin ...
1
vote
4answers
10k views

Mapping UIDs for NFS

I have a Mac OS X file server that serves via SMB/CIFS and AFP. The server is a domain client via the golden triangle approach, but this results in a very large UID for the users. This is fine for ...
5
votes
1answer
3k views

How do you run a PHP script as the file's owner, rather than as the webserver user?

I'm sure there's a well-known answer for this, but I can't seem to find it. How do I make a user's PHP scripts (in ~user/public_html, for example), run as the owner rather than as (eg) www-data? ...