[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SUID



On Wed, Sep 19, 2001 at 04:35:11AM +0800, csj wrote:
> On Wed, 2001-09-19 at 03:15, Jason Healy wrote:
> > At 1000834035s since epoch (09/18/01 13:27:15 -0400 UTC), Ian Marlier wrote:
> > > I feel like an idiot asking this, but how does one set something to 
> > > run SUID?
> > 
> > chmod u+s To setUID to the user that owns the file
> > chmod g+s To setGID to the group that owns the file
> > 
> > Standard disclaimer: Be VERY careful with setuid programs!  You're
> > essentially giving anyone the ability to run a program as another user.
> 
> This I believe is the only way to burn CDR's as nonroot.

Well, that's not true :)

$ ls -lL /dev/sg?
crw-------    1 root     root      21,   0 Dec 31  1969 /dev/sg0
crw-rw----    1 root     cdrom     21,   1 Dec 31  1969 /dev/sg1
crw-rw----    1 root     cdrom     21,   2 Dec 31  1969 /dev/sg2

Anyone in the cdrom group can burn a cd.

If you're using devfs, you can use a REGISTER statement in your devfs
conf to set up permissions.

-- 
Nathan Norman - Staff Engineer | A good plan today is better
Micromuse Ltd.                 | than a perfect plan tomorrow.
mailto:nnorman@micromuse.com   |   -- Patton

Attachment: pgpjyGVE2mtlk.pgp
Description: PGP signature


Reply to: