[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Intent to package runas...



On Tue, 8 Sep 1998, Philippe Troin wrote:

 : Michael Bramer wrote:
 : 
 : > Hello
 : >
 : > From the Readme:
 : > #         Runas is a program that allows the super-user to run a program as if
 : > # an ordinary user ran it. There are two main uses for runas, and both relate
 : > # to security.
 : > #
 : > #         One is to allow the super-user to execute a binary given by an
 : > # un-trusted user. Suppose the program is /usr/smith/program. The super-user
 : > # simply creates a dummy account, say one called 'nobody' which doesn't have
 : > # sufficient privileges to do any harm (the account needn't have login
 : > # capability). The super-user can then do:
 : > #
 : > # 'runas nobody /usr/smith/program'
 : 
 : Out of my head, this is a runas clone:
 :     #!/bin/sh
 :     user=$1
 :     shift
 :     exec su -c "'$@'" $user

Or, `sudo -u user "command"'

--
Nathan Norman
MidcoNet  410 South Phillips Avenue  Sioux Falls, SD
mailto:finn@midco.net           http://www.midco.net
finger finn@home.midco.net for PGP Key: (0xA33B86E9)



Reply to: