The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
26 views

how to determine the permissions of groups?

When you invoke sudo, it prompts for password and then checks the /etc/sudoers configuration file to see if the user is permitted access to run the command. /etc/sudoers is the sudo configuration ...
2
votes
1answer
31 views

Allow non-root unmodifiable sofware to bind to ports 80 & 443

The company I'm in uses the Java Secure Application Manager to "secure" non-internal connections their webmail and electronic collaboration software. Aside from using expired certificates, and ...
1
vote
3answers
38 views

Vim Error 'E212: Cannot open file for writing', when trying to create new files outside of home dir

I am running Wheezy Debian. When I try to create a new file in a directory other than my home directory, such as /var/www, I get the following error in vim: E212: Cannot open file for writing. I ...
1
vote
0answers
75 views

Can't delete 777 file with permissions on parent directory

As my VCS I use git version 1.7.10.4 . However, when trying to perform a pull, I got the following message: error: unable to unlink old 'somedir/config.php' (Permission denied) So what I did is: ...
3
votes
2answers
59 views

Detecting cron tasks run by another user

I am currently working through the Nebula challenges on exploit-exercises.com, and one of the challenges relies on a script being run by cron. This is run by another user (flag03) and the user I am ...
2
votes
3answers
166 views

How do I drop root privileges in shell scripts?

The "--up" option in OpenVPN is normally used for routing etc. And so it is processed before OpenVPN drops root privileges to run as nobody. However, I am invoking shell scripts that need to run as an ...
0
votes
2answers
192 views

Privileges for jenkins at apache's folder

I'm having issue similar to this: How to copy files as Jenkins "post build" action if i don't have privileges to destination directory I'm willing to move/copy/rsync files from jenkins ...
1
vote
1answer
45 views

Why doesn't setuid not work? [duplicate]

I want my program can only be run by user xyz using root privilege. So I set setuid with: chmod u+s program1.sh ls -l program1.sh rwsr-x--- 1 root house 1299 May 15 23:54 program1.sh And I let user ...
1
vote
1answer
157 views

How to copy files as Jenkins “post build” action if i don't have privileges to destination directory

I have the following users "architecture" : root access is disabled. admin user have access only to its home directory. Apache runs as root service (root is the only one that have access to ...
1
vote
0answers
28 views

Type 1 Hypervisor hardware privileges, make use of host drivers.

I guess a "type 1" hypervisor is one that is running directly on the host's hardware to control the hardware and manage the guest operating systems, so, does that imply that it would be able to make ...
3
votes
2answers
225 views

I'm not getting privileges, edited /etc/sudoers [duplicate]

I want to run any program without asking root password. Because I'm the only person who use the system. So I googled and edited /etc/sudoers. What I did: # chmod 640 /etc/sudoers # vim /etc/sudoers ...
0
votes
1answer
68 views

How can Window Managers shutdown the computer? [duplicate]

When logged in to a virtual shell as an unprivileged user and try to shutdown, reboot, init 0 or init 6 don't work. But if you're running a desktop environment, you can easily select its shutdown ...
5
votes
1answer
161 views

Enable superuser when logged in with another user

Suppose that the machine has two users: Alice (admin) Bob (standard user) While Bob is logged in, how can Alice modify a root file (Bob does not have this permission even with sudo)? Alice tried: ...
1
vote
1answer
48 views

Show who a file is chowned to?

To make things brief: I can chown a file with chown me:mygroup /tmp/file, but how can I see who a file is already chowned to? Something like chown --show-who mabey... Any clean way to see who is ...
2
votes
3answers
72 views

Run script as a different user from root [closed]

From root user, how can I give permissions to another user to execute the file /root/script.sh ? The idea is to run the script like sudo -u user1 /root/script.sh
2
votes
2answers
120 views

Privileged mode in bash

I've used bash for years but I 've stuck with the"privileged mode" that it can be configure with the set command. For example: set -p I've read the bash man page but it's somewhat obscure. For ...
3
votes
2answers
91 views

using SUID bit to drop privileges

So this is a description of the system I'm working on : a "manager" process spawns all the other applications. The manager application runs as root user. so now, any process that it spawns also ...
1
vote
1answer
72 views

impact of allowing Apache to execute some commands on the server

I have an Ubuntu 12 web server running apache2, I developed a graphic interface using PHP to make users able to create their own email account by themselves ( exec() function), so I used visudo to ...
16
votes
6answers
16k views

Linux: allowing an user to listen to a port below 1024

I need to allow an user (different from root) to run a server listening on port 80. Is there any way to do this?
3
votes
3answers
40 views

possibilty of running deamons with under privilaged users while bootup

I have authoritative DNS daemon in my test DNS setup. which is responsible to provide host IP at best choice. Anyway this daemon/process can run by setting some capabilities using setcap and then a ...
1
vote
1answer
66 views

Is it possible to log in in a host with an user created for programs like apache or postgreSQL?

I am wondering whether is it possible to log in in a computer with users like www-data or postgres as I do with my own user. Are some users "allowed to log in" while others not? Is there any ...
3
votes
1answer
98 views

Richacl invalid argument when trying to set atributes

I've compiled a kernel to use richacls, and compiled the richacl's utility, (but not the e2fsprogs). I've mounted a loop file with richacl flags /root/fs_prueba_10mb on /media/ext4_con_richacl type ...
4
votes
2answers
393 views

Purpose of using setuid() in SUID programs

I wonder that an SUID program like passwd is using the setuid() function call. Why does it drop root privileges? Against what types of attack does this help? Buffer-overflow?
2
votes
0answers
268 views

CUPS denies access to printer

I've got a printer hooked up to my workstation (running PCLINUXOS2012) by USB. All was well until the last time I tried to apply updates to the packages - it went rather pear shaped - lots of upgrade ...
5
votes
2answers
15k views

How to give user root permissions?

I just installed Arch. Works great. I created a new user, logged in with it and now I'm trying to install several thing with pacman. But I keep getting the error: error: you cannot perform this ...
4
votes
2answers
153 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
2
votes
1answer
69 views

Keep track of all files accessed by a specific process?

There has recently been a (publicly unconfirmed) report that Skype is accessing files that it shouldn't be, without user intervention. I have no idea if this is the case with Skype on linux, but it ...
1
vote
3answers
401 views

How to gain root privileges for specific user if we have root password? [closed]

Can someone suggest how can I change process privileges in Linux to root ? Assume, I have a normal process running under some user-consider me. Now my script should create some users using 'useradd' ...
2
votes
3answers
169 views

How to create a user account with specific permissions?

I want to create a unix user account with specific permissions: this user must be able to install software, but can't remove software. Furthermore, when the user logs in, root must receive a ...
44
votes
3answers
2k views

How do the internals of sudo work?

How does sudo work internally? How is it possible that it can become root without having the root password, unlike su? What syscalls, etc. are involved in the process? And why is however sudo does it ...
3
votes
2answers
145 views

why do I have two different results if I run a program through terminal(as root) or /etc/init.d(or /etc/rc.local)

Background: I use Debian Lenny on an embedded device uname -a Linux device 3.4.0 #83 Sun May 26 17:07:14 CEST 2013 armv4l GNU/Linux I have a C code (say my_C_program) that calls a board specific ...
80
votes
7answers
11k views

Which is the safest way to get root privileges: sudo, su or login?

I would like to have the root account in safety even if my unprivileged user is compromised. On Ubuntu you can only use sudo for "security reasons" by default. However I am not sure it is any safer ...
2
votes
0answers
95 views

Understanding getlogin spoofing

My question is in three (or so) related parts: 1) My understanding is that getlogin() will effectively return the auid associated with the process and so isn't actually changable by the user. Is that ...
0
votes
1answer
255 views

Which tasks/commands can't be executed with user gid=0 but not uid=0 on Linux [duplicate]

In a Linux server I will have an user with gid=0 but it's uid won't be 0. As there are many commands with root:root and execute permissions for group I know there will be a lot of administrative task ...
1
vote
1answer
858 views

Safe to change owner of OS X system folders?

I'm trying to get Homebrew to work. That program's diagnosis tool gives me these suggestions: You should probably chown /usr/local/etc ... You should probably chown them: ...
0
votes
3answers
145 views

How to limit administrative privileges to various config files?

I want one administrator to be able to edit the /etc/fstab file but one administrator to not be able to edit the fstab file. Both administrators need access to all other administrative tasks. Is ...
6
votes
4answers
377 views

How do I stop the root user from deleting a file?

I'd like to know if I can prevent the root user from deleting a file. Is it possible?
1
vote
1answer
789 views

Allow all group members to create directories and files

There are 2 users sftp_user apache Both users belong to the updaters group as well as other groups. New directories and files are created in the /updates/ directory. drwxrwsr-x 8 sftp updaters ...
2
votes
1answer
77 views

Using sudo to give access to another account on same machine

There are two unix accounts A and B.I want to execute a unix command from account B such that the command behaves as if it was executed from account A .How can I do this ? The problem here is that ...
2
votes
0answers
317 views

How does Linux Mint 13 GUI (Cinnamon) know which users have administrator privileges?

Recently Cinnamon crashed. And I can no longer: Change settings of network manager Mount any external disks (except by sudo mount ... on command line) Shutdown (only can log out) Click "unlock" on ...
4
votes
5answers
3k views

Drop Process Privileges

I have a process that gets started by a damon running as root, now I want to "downgrade" this process's privileges to those of your average user. Is this possible? If yes how? PS: Running unix on a ...
2
votes
3answers
2k views

How does the set-user-ID mechanism work in Unix?

Can someone please explain the set-user-ID mechanism in Unix ? What was the rationale behind this design decision? How is it different from effective user id mechanism ?
5
votes
1answer
313 views

root owned program with setuid bit on

Ping is a a program owned by root with the user id bit set. $ ls -l `which ping` -rwsr-xr-x 1 root root 35752 Nov 4 2011 /bin/ping As I understand it, if a user runs the ping process, then the ...
3
votes
3answers
9k views

How to create an unprivileged user in CentOS?

I want to create an unprivileged user to run my RhodeCode server and Celery daemon on a CentOS instance. I think the accepted definition of this is no home directory, login disabled, and no shell ...
2
votes
3answers
2k views

Switching to superuser while shell script is running

I have a shell script that contains the following lines: CURRENT_USER=${USER} echo $CURRENT_USER su echo switch to `who am i` Once the 2nd line is executed, the shell prompts me to enter the root ...
6
votes
1answer
230 views

How do DE's call ACPI functions?

Okay, first off, this is not a problem I am facing, but I would like to understand this better. If I wish to shutdown / reboot my machine from the command line I need to call: $ sudo poweroff $ sudo ...
4
votes
1answer
2k views

Insufficient privileges in NetworkManager with xmonad

I have problem with Network Manager in xmonad. Let's say I want to connect to a new wireless network. When I try to do so, error is displayed, saying: "insufficient privileges". But when I try do do ...
2
votes
1answer
850 views

Ubuntu 11.10 Server: create user, home directory, sudo privileges: command line only

I have a rackspace server and I'm having problems with configuration. I need to lock it down and throw away the key, because right now I can only login with root to do anything substantial. I also am ...
2
votes
2answers
2k views

How to grant a “no-root-user” rights to start/stop/restart mysql server on suse machine?

Is it possible to grant priviliges to a "no-root-user" to start and/stop/restart the mysql server on a suse machine? The goal is to make it for a developer possible to tune a mysql server/database ...
2
votes
3answers
210 views

What was superuser password set? [duplicate]

Possible Duplicate: Is there a root password on OS X and Ubuntu? After I installed Ubuntu, I noticed that I'm not sure what was superuser password set, If I set it at all. I know that I ...