1

I'm trying to allow a user to connect to the screens that the root user has. When another user does "screen -ls", it shows "No Sockets found in /var/run/screen/S-USERNAMEHERE".

In addition to this, is it possible to restrict users to individual screens? For example, I don't want user1 to attach to screen1, but I want them to be able to attach to screen2.

Thanks, Toby.

  • 1
    To list accessible screens belonging to another user use screen -ls username/. – kasperd Sep 5 '15 at 22:09
  • Great to know! This comes up with "Must run suid root for multiuser support.", which I've googled. I've enabled multiuser with "Ctrl-a :multiuser on" and "Ctrl-a :acladd USERHERE" but when I type screen -ls USERHERE/ nothing shows up still. Thanks for the help. – Toby Mellor Sep 5 '15 at 22:25
  • 1
    I have only been using it to let root connect to a non-root screen. That may explain why I didn't need to make it suid. But I only used that on Debian, so I don't know if there might be any difference between Ubuntu and Debian. – kasperd Sep 6 '15 at 7:40
  • @kasperd Usually Ubuntu and Debian are quite similar. Have you got any suggestions for a non-root connecting to a root screen? Thanks! – Toby Mellor Sep 6 '15 at 12:14
  • I would first become root through any of the usual means and then attach to the screen. Changing screen to be suid if it wasn't already means you would be opening a possible attack vector for an intruder to gain root privileges. – kasperd Sep 6 '15 at 13:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.