Re: Setuid in rh9?

2003-06-17 Thread Thornton Prime
in/suidperl > > -rwsr-xr-x1 root root 1176 Jun 16 21:13 create > > bash-2.05b$ whoami > nobody > bash-2.05b$ ./create > Can't do setuid > bash-2.05b$ $ ls -l test.pl -rwsr-sr-x1 root root 60 Jun 17 09:47 test.pl $ cat test.pl #!/

Re: Setuid in rh9?

2003-06-17 Thread Drew Weaver
> > > Red Hat provides a setuid perl in the perl-setuid package. SetUID perl > > > includes its own restrictions and security precautions. > > > > Yeah they sure do, except it doesnt work under any circumstance, no matter > > what I do it says Can't do s

Re: Setuid in rh9?

2003-06-17 Thread Thornton Prime
> > Red Hat provides a setuid perl in the perl-setuid package. SetUID perl > > includes its own restrictions and security precautions. > > Yeah they sure do, except it doesnt work under any circumstance, no matter > what I do it says Can't do suid. Works for me. As me

Re: Setuid in rh9?

2003-06-17 Thread Drew Weaver
> > > | The correct answer would've been, rebuild perl with setuid. > > > > No. The correct answer is to stay the hell away from setuid, > > and use sudo which allows fine grained control. > > Red Hat provides a setuid perl in the perl-setuid package. SetUI

Re: Setuid in rh9?

2003-06-16 Thread Thornton Prime
> | The correct answer would've been, rebuild perl with setuid. > > No. The correct answer is to stay the hell away from setuid, > and use sudo which allows fine grained control. Red Hat provides a setuid perl in the perl-setuid package. SetUID perl includes its own restrict

RE: Setuid in rh9?

2003-06-16 Thread Bret Hughes
On Mon, 2003-06-16 at 20:47, Drew Weaver wrote: > I guess the real question is why is there a perl-setuid rpm if it > doesn't function under any circumstance? > > -Drew > Could not tell you but it does not make too much sense to me. Bret -- redhat-list mailing lis

RE: Setuid in rh9?

2003-06-16 Thread Drew Weaver
I guess the real question is why is there a perl-setuid rpm if it doesn't function under any circumstance? -Drew -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bret Hughes Sent: Monday, June 16, 2003 9:06 PM To: [EMAIL PROTECTED] Subject: RE: Setu

RE: Setuid in rh9?

2003-06-16 Thread Bret Hughes
On Mon, 2003-06-16 at 19:26, Drew Weaver wrote: > Ok, well im not trying to be difficult, this script adds/removes/changes > users in the passwd files. Basically what happens is a cold fusion > script on our db server contacts the mail server and says hey, add this > user, with this password, and t

RE: Setuid in rh9?

2003-06-16 Thread Drew Weaver
Please don't top post. On 20:08 16 Jun 2003, Drew Weaver <[EMAIL PROTECTED]> wrote: | The correct answer would've been, rebuild perl with setuid. No. The correct answer is to stay the hell away from setuid, and use sudo which allows fine grained control. -- Ok there mail li

RE: Setuid in rh9?

2003-06-16 Thread Drew Weaver
, 2003 8:29 PM To: [EMAIL PROTECTED] Subject: RE: Setuid in rh9? On Mon, 2003-06-16 at 19:08, Drew Weaver wrote: > The correct answer would've been, rebuild perl with setuid. > > Eh? > I have never used setuid in perl but would not that allow anyone to run it or worse create a

Re: Setuid in rh9?

2003-06-16 Thread Cameron Simpson
Please don't top post. On 20:08 16 Jun 2003, Drew Weaver <[EMAIL PROTECTED]> wrote: | The correct answer would've been, rebuild perl with setuid. No. The correct answer is to stay the hell away from setuid, and use sudo which allows fine grained control. -- Cameron Simpson &

RE: Setuid in rh9?

2003-06-16 Thread Bret Hughes
On Mon, 2003-06-16 at 19:08, Drew Weaver wrote: > The correct answer would've been, rebuild perl with setuid. > > Eh? > I have never used setuid in perl but would not that allow anyone to run it or worse create a script with root powers? I have to agree with Cameron that su

RE: Setuid in rh9?

2003-06-16 Thread Drew Weaver
The correct answer would've been, rebuild perl with setuid. Eh? -Drew -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cameron Simpson Sent: Monday, June 16, 2003 7:22 PM To: [EMAIL PROTECTED] Subject: Re: Setuid in rh9? On 16:48 16 Jun 2003,

Re: Setuid in rh9?

2003-06-16 Thread Cameron Simpson
suming that I am running the script as root, when i chown +s this | file and then try and run it as user nobody it says 'Can't do setuid'. Please press [enter] every 70 chars or so. | it worked fine on 6.2 They're built perl without setuid support. Which is the CORRECT wa

Setuid in rh9?

2003-06-16 Thread Drew Weaver
file and then try and run it as user nobody it says 'Can't do setuid'.   it worked fine on 6.2   any clue? -Drew  

setuid

2003-06-16 Thread Drew Weaver
file and then try and run it as user nobody it says 'Can't do setuid'.   it worked fine on 6.2   any clue? -Drew  

Re: perl setuid

2003-04-02 Thread Gary Stainburn
gt; > Cc: "Red Hat 8.0" <[EMAIL PROTECTED]> > Sent: Wednesday, April 02, 2003 10:59 AM > Subject: Re: perl setuid > > On Wed, 2 Apr 2003, Daniel Tan wrote: > > it seems like rh8 does not have setuid install as default.is there a easy > > way to install setuid

Re: perl setuid

2003-04-01 Thread Daniel Tan
AIL PROTECTED]> Cc: "Red Hat 8.0" <[EMAIL PROTECTED]> Sent: Wednesday, April 02, 2003 10:59 AM Subject: Re: perl setuid On Wed, 2 Apr 2003, Daniel Tan wrote: > it seems like rh8 does not have setuid install as default.is there a easy > way to install setuid in perl using c

getenv & setuid changed behavior RH6.2 -> RH7.3

2002-09-10 Thread Jan . Rovins
Hi all, We have an application program that we could run on a RedHat 6.2, but we are seeing different behavior on RedHat 7.3. Here is the situation: This application uses Posix Preemptive Threads, and Raw Sockets, so it must run as root. We have a testing convention where we set the suid bit

Re: setuid problem

2002-06-18 Thread Anthony E. Greene
daniel wrote: >i've got a script here that goes through a directory tree and blows away all >the files that netatalk puts in there for my mac users -- (i just don't like >this stuff all over the place). the problem is that i want this script to >always run as root, and i want to be able to edit

Re: setuid perl script needed

2001-04-09 Thread Bret Hughes
Matthew Simpson wrote: > Hi Bret, > > Where can I find info on sudo and howto set it up? Matt- The sudo rpm should be on the powertools cd the man pages are very good. sudo and sudoers are the ones I used and for a change there were actually examples. You will need to use visudo to edit the su

Re: setuid perl script needed

2001-04-09 Thread Werner Puschitz
Try using /usr/bin/suidperl or sudo. On Wed, 4 Apr 2001, Matthew Simpson wrote: > Hi All, > > Would anyone have an setuid script that could do something similar as > the following > > > The script needs to beable to do for example: > >o only allow changes to f

Re: setuid perl script needed

2001-04-09 Thread Matthew Simpson
Hi Bret, Where can I find info on sudo and howto set it up? Matt >Matthew Simpson wrote: > >> Hi All, >> >> Would anyone have an setuid script that could do something similar as >> the following >> >> The script needs to beable to do for exampl

setuid perl script needed

2001-04-03 Thread Matthew Simpson
Hi All, Would anyone have an setuid script that could do something similar as the following The script needs to beable to do for example: o only allow changes to files under /www o do a "chgrp multimedia", and "chmod g+w" o optionally do recursive changes for d

Re: setuid vs executing as that user

2000-07-20 Thread Anthony E . Greene
On 20 Jul 2000 21:12 Bret Hughes wrote: >I would like to run netscape as a different user from a >script to display some images. I (apparently mistakenly) >thought that if I ran netscape from a script with the setuid >bit set and the owner of the script being the user I want, >th

setuid vs executing as that user

2000-07-20 Thread Bret Hughes
I would like to run netscape as a different user from a script to display some images. I (apparently mistakenly) thought that if I ran netscape from a script with the setuid bit set and the owner of the script being the user I want, that I could then launch netscape as that user. Nope. Is

Re: Insecure dependency - with setuid (Obsidian OCS)

1999-12-16 Thread a mole
Hello Perry, I don't know what Obsedian is but the error is a perl security feature. When running setuid, that is the effective UID and real UID don't match, perl runs in 'taint mode' which means no user supplied/affected data can be used to affect anything outs

Insecure dependency - with setuid (Obsidian OCS)

1999-12-15 Thread Perry Blalock
Hello, I'm running Obsidian and keep getting the following error when trying to do an edit from the web page: Insecure dependency in require while running setuid at /opt/ocs/modules/cal/dbedit.pl line 5. HERE IS LINE 5 OF THE dbedit.pl file: #!/usr/bin/perl sub dbedit { $w{s

Re: setuid

1999-12-13 Thread Todd A. Jacobs
On Fri, 10 Dec 1999, Steve Lee wrote: > what does it mean to run something setuid It means the program assumes a user id other than that of the person running the file. For example, if something needs to be run as root, you can set a program to be suid root, and it will run as root regardl

Re: setuid

1999-12-10 Thread lloy0076
Steve Lee wrote: > > what does it mean to run something setuid It means the program runs as root even though another non-root user has run it. -- THE LINUX C AND C++ MAILING LISTS ARE ABOUT TO MOVE! mailto:[EMAIL PROTECTED] THE LINUX C AND C++ MAILING LISTS ARE ABOUT TO MOVE!

Re: setuid

1999-12-10 Thread Brian
On Fri, 10 Dec 1999, Steve Lee wrote: > is that the s when you do chmod +x you mean when you do +s? yes. chmod 4000 filename will add the setuid bit chmod +s filename will do the same. Brian > > On Fri, 10 Dec 1999, Brian wrote: > > > On Fri, 10 Dec 199

Re: setuid

1999-12-10 Thread Steve Lee
is that the s when you do chmod +x On Fri, 10 Dec 1999, Brian wrote: > On Fri, 10 Dec 1999, Steve Lee wrote: > > > > > what does it mean to run something setuid > > It means that when you run the program, the program changes to the uid of > the owner of the

Re: setuid

1999-12-10 Thread Brian
On Fri, 10 Dec 1999, Steve Lee wrote: > > what does it mean to run something setuid It means that when you run the program, the program changes to the uid of the owner of the program. So if you have a program and its owned by root, and you make it setuid root and executable (chmo

Re: setuid

1999-12-10 Thread Bruce Richardson
On 10 Dec, Steve Lee wrote: > > what does it mean to run something setuid > It means that the program will be run with the User ID of it's owner. This is mostly done to allow standard users to do things that require root privileges. -- Bruce -- To unsubscribe: mail [E

setuid

1999-12-10 Thread Steve Lee
what does it mean to run something setuid -- To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" as the Subject.

Re: setuid script

1999-12-03 Thread Steven W Orr
Look at sudo. Get it from rufus. -- --Time flies like the wind. Fruit flies like a banana. Stranger things have happened but none stranger than this.- Steven W. Orr [EMAIL PROTECTED] ---"Listen to me! We are all individuals."-

setuid script

1999-12-03 Thread Chad W. Skinner
I am trying to upload a file using php3 and I need to allow the users to change the permissions on the files so they can access them in safemode. Basically, I need the script to be able to copy and change the permissions on a file. The problems is my uid is 500 and the files are uploaded owned by

Re: setuid ? how ?

1998-06-14 Thread altex
>Just a bit more info (for those who wish and/or care to know..) :) > >The 'chmod' (Change Mode) command in the *nix world has two different >methods (modes) of operation. One is known as the 'symbolic' mode, and is >represented by an octal number. >Now here's how these 'octal numbers' can be

Re: Fwd: Re: setuid ? how ?

1998-06-13 Thread Leston Buell
Thanks. Putting in the whoever.net after the word "search" did the trick. The nameserver addresses were already in there, although i have no idea how they got there. This has now rendered my Linux setup half usable. Thank again. Leston >Do you have your ISP's namesevers listed in /etc/resolv.con

setuid ? how? was setuid ? how?

1998-06-11 Thread altex
I read all replies but I still don't know how to setuid a program. More details on this topic, please . bcd -- PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES! http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists To unsubscribe:

Re: setuid ? how ?

1998-06-11 Thread Bill Fox
are set in the FOURTH. Here's another common combination that allows read and write permissions to all users for 'pooty': chmod 0666 pooty That's some basics to chew on. Also be aware that the 'setuid' (4000), 'setgid' (20*0) and the notorious 'st

RE: setuid ? how?

1998-06-10 Thread Lee Kirby
>I have a similar question. I want to use ezppp as a non-root user, but i >get a message saying: If I were you, I wouldn't setuid pppd, instead, I would use sudo. I run a 5.0 machine, and after installing all of the errata, and sudo, I found that visudo (/etc/sudoers editor) runs

Re: setuid ? how ?

1998-06-10 Thread dreamwvr
If memory serves chmod 4755 /path/to/pppd At 08:16 AM 6/10/98 -0700, you wrote: >I have a similar question. I want to use ezppp as a non-root user, but i >get a message saying: > > must be root to run pppd, since it is not setuid-root > >I went to the man pppd page

Re: setuid ? how ?

1998-06-10 Thread Gree
ton Buell wrote: > I have a similar question. I want to use ezppp as a non-root user, but i > get a message saying: > > must be root to run pppd, since it is not setuid-root > > I went to the man pppd page but still couldn't figure out what to do. > > Les

Re: Fwd: Re: setuid ? how ?

1998-06-10 Thread Ray Curtis
> "lb" == Leston Buell <[EMAIL PROTECTED]> writes: lb> Oh. Now i am just S close to being able to use Linux as a non-root lb> user. I did: >> chmod a+s /usr/sbin/pppd lb> as you instructed, and now my dial-up works fine. But now i need to know lb> how to be able to use Netscape as a

Fwd: Re: setuid ? how ?

1998-06-10 Thread Leston Buell
Oh. Now i am just S close to being able to use Linux as a non-root user. I did: >chmod a+s /usr/sbin/pppd as you instructed, and now my dial-up works fine. But now i need to know how to be able to use Netscape as a non-root. When i click on a link i get a "no DNS" error scree

Re: setuid ? how ?

1998-06-10 Thread Maxwell Smart
On 10-Jun-98 Leston Buell wrote: > I have a similar question. I want to use ezppp as a non-root user, but i > get a message saying: > > must be root to run pppd, since it is not setuid-root > > I went to the man pppd page but still couldn't figure out

Re: setuid ? how ?

1998-06-10 Thread Leston Buell
I have a similar question. I want to use ezppp as a non-root user, but i get a message saying: must be root to run pppd, since it is not setuid-root I went to the man pppd page but still couldn't figure out what to do. Leston At 01:30 PM 6/10/98 +0300, you wrote: >how do

setuid ? how ?

1998-06-10 Thread altex
how do I change the uid under which a program runs ? is it possible for a regular user to run a program that requires root privileges ? (like "shutdown -r now") what is setuid/suid ? bcd -- PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES! http://www.redhat.