[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Wvdial for not-root access. How?



Here's my cheating way of allowing non-root users access to certain root
programs.

put a line in /etc/passwd that says something like 

halt:<passwdhere>:0:0:halt:/sbin:/sbin/halt

The zero uid allows the login to be root, but instead of running a shell,
it runs runs /sbin/halt and shuts down. (this particular line came from
my wife's laptop).

I've been meaning to ask people if this opens a security hole that I
haven't thought about, I guess this is as good as time as any.
(actually can you send responses to ezeller@ericzeller.com as I can't
afford to read 100 messages a day on this list, I'll try and keep up on
the archives also).

I also used to have similiar logins for ppp-up and ppp-down, but now that
I have a working router/firewall with diald, I commented them out.

I guess I should also point out (security wise) that the laptop is mostly
hooked up to the internet behind my firewall which does not have any of
these lines in the passwd file. Occasionally it gets taken to work and is
hooked up behind that firewall. So I'm a little lax on security for it.



Eric Zeller	A Happy Oacis Employee			ezeller@ericzeller.com
http://www.ericzeller.com					
"The Ships hung in the air in exactly the same way bricks don't" - HHGTTG

On Mon, 13 Sep 1999, David Kanter wrote:

> Wvdial only works with root access. Currently, I su root, and then type wvdial.
> 
> Is there a way so that I, when a non-root user, can start wvdial securely? I've read that suid will work, but is an insecure way of doing it. I want to do this the right way. Perhaps just su-ing root is the best?
> 
> Thanks,
> Dave
> 
> 
> -- 
> Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null
> 
> 


Reply to: