The setuid tag has no wiki summary.
0
votes
1answer
160 views
Prevent setuid from dropping setcap user privileges (VirtualBox)
I'm trying to run a web server from a headless, NAT'd VirtualBox guest. VirtualBox needs to bind to port 80, but the only way to do so is by running VirtualBox as root. To get around this, I tried ...
1
vote
1answer
57 views
Unable to su into any user
After I have fiddled with the folders /usr/bin, /usr/lib and /usr/lib64 I restored them, but was not able to su into root (and probably other accounts too):
Permissions on the password database may ...
1
vote
3answers
121 views
What's the safest way to kick off a root-level process via cgi on an Apache server?
The problem: I have a script that runs periodically via a cron job as root, but I want to give people a way to kick it off asynchronously too, via a webpage. (The script will be written to ensure it ...
1
vote
1answer
51 views
How to start/stop service with Apache2 on Ubuntu
Using Apache, I'd like to be able to start and stop a service on the same server. Essentially, I'm looking for a way to allow Apache (or some script called by Apache) to call sudo service XXXX start.
...
2
votes
0answers
129 views
checksecurity / setuid changes, is this a bug or did somebody break in?
I received a mail by checksecurity from my ubuntu 12.04 server with the following content:
--- setuid.today 2012-06-03 06:48:09.892436281 +0200
+++ /var/log/setuid/setuid.new.tmp 2012-06-17 ...
3
votes
1answer
596 views
How can I use SetUID on a shell script to run as a non-root user?
Our company's server is running Ubuntu 12.04 (Precise) and Apache 2. We have a custom, internal web application installed. I have a bash script which pulls any updates to that app from source control ...
0
votes
2answers
232 views
SETUID Permission Denied
I have been learning Linux from few days, and now I was trying to learn the advanced file permissions like setting UID, GID and sticky bit.
At root I have first changed the ownership of directory to ...
1
vote
3answers
1k views
sudo: must be setuid root (Mac OS X)
I ran
$ sudo chown -R $USER /usr/bin
and now when I try to run programs under the /usr/bin path as sudo I get
sudo:must be setuid root
What should I do if I would like to revert the chown?
0
votes
2answers
2k views
Cannot write to CIFS share as non-root user - CentOS 6
I'm working on a system recently migrated to CentOS 6 from CentOS 4.9. There is a CIFS mount from a Windows 2008 server that existed on the old system. The raw mountpoint has 777 directory ...
2
votes
2answers
1k views
Upload only SFTP with OpenSSH and Linux?
I'd like to set up a chrooted SFTP server with upload only privileges.
Back in the day, I know I've done this with FTP on FreeBSD through the use of SETUID. All uploaded files were automatically ...
2
votes
1answer
384 views
When is appropriate to remove setuid/setgid privileges from an app?
I've been skimming through the NSA suggestions for hardening Mac OS X and Linux and noticed this little tidbit of info:
Setuid programs run with the privileges of the file's owner (which is often ...
0
votes
4answers
764 views
How to make default owner for all files and directories in folder
I want all new files created in one folder to have an owner called user1
How can I do that?
3
votes
1answer
336 views
Selective setuid root or running an application as root ? (web server/cgi context)
Well we have an in house server manager (like Webmin, only more specific), comprising of a bunch of C CGI programs and CGI Perl scripts, some of which require root privileges (adding system users, ...
0
votes
1answer
623 views
How does MySQL run as user “_mysql” on Mac?
On Mac, MySQL seems to save data as the "_mysql" user. Can somebody please explain how this is achieved. I would have expected the MySQL server application (mysqld) to have the setuid flag set, so ...
1
vote
2answers
594 views
Adding a new user into linux from a script
I am using a customized Redmine installation to manage projects. I have managed to hook the addition of new users and send the login information to a bash script I have. Below is my script:
#!/bin/sh
...
3
votes
3answers
894 views
sudo or acl or setuid/setgid?
for a reason I do not really understand, everyone wants sudo for all and everything. At work we even have as many entries as there are way to read a logfile (head/tail/cat/more, ...).
I think, sudo ...
1
vote
1answer
700 views
Running a shell script with its owner's privileges
On a Debian (5.0.3) server I have a user svnsync who owns a certain shell script:
-rwsrwsr-x 1 svnsync users 119 Dec 21 13:45 mirror-svn.sh
I'd like everyone in the users group to be able to ...
2
votes
5answers
7k views
(Ubuntu) setuid bash doesn't work
Here is the code:
(root:)
# mkdir /test
# cp /bin/bash /test/sbash
# chmod a+s /test/sbash
(user1:)
$ cd /test
$ ./sbash
$ mkdir trycreate
mkdir: cannot create directory `trycreate': Permission ...
0
votes
5answers
1k views
Setuid not working on Solaris
I have a Perl script marked setuid, but when I run it, it says I don't have permission to do so. I am running Solaris 10. This works on another system but I can't tell whats different. What am I ...
7
votes
4answers
5k views
Set uid for windows
Is there an equivalent of set uid for windows(XP)? The 'run as' option requires admin password each time it runs. I want users to be able to run that particular executable without knowing admin ...
1
vote
4answers
5k views
Mapping UIDs for NFS
I have a Mac OS X file server that serves via SMB/CIFS and AFP. The server is a domain client via the golden triangle approach, but this results in a very large UID for the users. This is fine for ...
4
votes
1answer
2k views
How do you run a PHP script as the owner?
I'm sure there's a well-known answer for this, but I can't seem to find it.
How do I make a user's PHP scripts (in ~user/public_html, for example), run as the owner rather than as www-data ?
Assume ...
