[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: rsh as root



On Fri, 1 Nov 2002, Robert Tompkins wrote:

> I am fairly sure you could just create a script that had the shutdown
> commands in it, then setuid the file (which is owned by root). Then you
> should be able to run the file as a normal user except it would get
> elevated to root privleges when ran. I don't have a beowulf in front of me
> right now so i can't test it but i do remeber doing something simlar
> before and having it work. For help with setuid and setguid check out the
> man page for chmod.

That shouldn't work.  Setuid scripts are a major security risk, and most
flavors of *nix will ignore the suid bit if it's on a script.

Damian Menscher
-- 
-=#| Physics Grad Student & SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| <menscher@uiuc.edu> www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=-



Reply to: