Re: User Privilege in RH 7.3

From: John-Paul Stewart (jpstewart_at_sympatico.ca)
Date: 09/16/03 

Date: Tue, 16 Sep 2003 15:35:45 -0400

Ed Murphy wrote:
>
> On Tue, 16 Sep 2003 09:14:13 -0700, Sam wrote:
>
> > Yes i can creat new user, but they all have low privileges, they can
> > read, write, and execute stuff of they own. But i like each user would be
> > able to mount a new device (such as CD, or Disck, or a Windows partitioned
> > hd), without changing to root.
> > Is it posible to creat a user with this privileg ??
> > I did tried user manager, but dident succeed.
>
> Don't do it that way. For each root-task that you want anyone to be able
> to do, create a script (say /usr/local/bin/whatever) that does it. Then,
> as root:
>
> chown root:root /usr/local/bin/whatever
> chmod 755 /usr/local/bin/whatever
> chmod +s /usr/local/bin/whatever
>
> (Is this correct?)

No, that's not correct. The setuid bit (chmod +s) will be ignored on
shell scripts for security reasons. The 'sudo' package is a better
idea. I suggest the OP look into that instead.

Relevant Pages

  • Re: User Privilege in RH 7.3
    ... Yes i can creat new user, but they all have low privileges, they can ... read, write, and execute stuff of they own. ...
    (comp.os.linux.misc)
  • Re: Card Reader
    ... and you get your payload to execute as root. ... Right, but most allow root to log in, and other trojans can ... The Unix vendors created DCE, but couldn't come up with a product that enough customers could figure out. ... The Windows users in my building at work were down ...
    (rec.photo.digital)
  • Re: chroot?
    ... > communications link and am setting up chroot for this ... Does it need to be suid root? ... To execute chroot, either the function or the command, ... you need any dynamic libs used by that program. ...
    (comp.unix.aix)
  • Re: AIX 5.1/5.2/5.3 local root exploits (diag issue)
    ... > environment variable as a prefix to an external binary executed as root. ... A vulnerability was discovered in the diag script that may allow any user ... To determine if this fileset is installed, execute the following ... various suid root AIX commands invoke the diag ...
    (Bugtraq)
  • Re: Card Reader
    ... and you get your payload to execute as root. ... Right, but most allow root to log in, and other trojans can ... more sophisticated tricks an attacker could pull in modifying the user's environment. ... Ease of use came to Unix long after the basic design was done, ...
    (rec.photo.digital)