Re: Can't get the set-user-id bit to work

2005-12-31 Thread Bob Proulx
I see that you have resolved your problem with bad permissions on /tmp. But I wanted to follow another line of discussion. Sebastian Tennant wrote: > [...test cases of suid-scripts...] > A cron.daily script handles mandb. I elected to install it with the > set-user-id bit set, as you can see: >

Re: Can't get the set-user-id bit to work

2005-12-29 Thread Sebastian Tennant
[EMAIL PROTECTED] (Paul Jarc) wrote: > Sebastian Tennant <[EMAIL PROTECTED]> wrote: >> OK, but mandb _is_ a member of the root group, so shouldn't it be able >> to write files in /tmp with the permissions as they stand? > > No, you'd have to make it setuid to root, or setgid to the root > group.

Re: Can't get the set-user-id bit to work

2005-12-27 Thread Paul Jarc
Sebastian Tennant <[EMAIL PROTECTED]> wrote: > OK, but mandb _is_ a member of the root group, so shouldn't it be able > to write files in /tmp with the permissions as they stand? No, you'd have to make it setuid to root, or setgid to the root group. The user/group associations in /etc/passwd and

Re: Can't get the set-user-id bit to work

2005-12-27 Thread Sebastian Tennant
[EMAIL PROTECTED] (Paul Jarc) wrote: > Sebastian Tennant <[EMAIL PROTECTED]> wrote: >> I have a 3-line script; foo: > > The setuid bit works only for binaries, not scripts. This is a > limitation of the kernel, necessary for security. Ah. I read the chmod manpage and some stuff in the find Info

Re: Can't get the set-user-id bit to work

2005-12-27 Thread Paul Jarc
Sebastian Tennant <[EMAIL PROTECTED]> wrote: > I have a 3-line script; foo: The setuid bit works only for binaries, not scripts. This is a limitation of the kernel, necessary for security. > A cron.daily script handles mandb. I elected to install it with the > set-user-id bit set, as you can se