[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: setuid programs under "sarge" and "woody"



On Thu, Oct 31, 2002 at 11:28:19AM -0600, Douglas Bates wrote:
> We have their tar program installed under the wsbackup login.  The
> program is owned by root.root and has setuid and setgid permissions.

> > It seems the script is being found, but has errors/doesn't
> > execute/something.
> 
> Is there something else I should do to allow this program to run
> setuid root?

if it is a bash script rewrite it to a perl script. bash scripts do not run
suid root.

You can also make the backup user numerical uid 0 and restrict its commands
it can execute by ssh cmd= command.

Greetings
Bernd
-- 
  (OO)      -- Bernd_Eckenfels@Wendelinusstrasse39.76646Bruchsal.de --
 ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes@irc  +497257930613  BE5-RIPE
(O____O)  When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!



Reply to: