The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
0answers
37 views

Some commands fail when active display/vt is different from where they are running, How to fix/workaround that?

These applets are running on X at DISPLAY=:0 (fgconsole 7). NetworkApplet Related to nm-applet/NetworkManager run this command sleep 10;nmcli nm enable false;beep (you must be connected to the ...
1
vote
2answers
54 views

Why does FreeBSD require terminal programs to be started as root?

On FreeBSD all graphical terminal programs (e.g. xterm, rxvt) seem to be installed setuid root, or with setuid root wrappers. On Linux, this is not the case on any distribution I have ever used. Why ...
5
votes
2answers
17k views

How to give user root permissions?

I just installed Arch. Works great. I created a new user, logged in with it and now I'm trying to install several thing with pacman. But I keep getting the error: error: you cannot perform this ...
2
votes
1answer
67 views

How to let a user create a directory although not create a sub directory

I'm trying to create a Bash shell script that allows for the transfer of files from a flash device to a archive in which the user will specify. Although I'd like to restrict this user from not being ...
3
votes
3answers
50 views

Understanding a couple of points regarding root privileges

I just wanted to confirm my understanding of a couple of things related to root privileges. Is it correct that: The user name "administrator" is not a reserved name with implied privileges, it is ...
1
vote
3answers
34 views

What is the mechanism for differentiating root requirements for terminal commands?

In the terminal, some operating system commands require root privileges and some don't. What is the mechanism for controlling this? Is each command actually a separate program with its own execution ...
1
vote
2answers
64 views

How does the script /etc/init.d/sudo work?

I was reading the script /etc/init.d/sudo. It has been written as a comment in the script that it provides limited super user privileges to specific users. Though, I could not understand the script ...
49
votes
3answers
2k views

How do the internals of sudo work?

How does sudo work internally? How is it possible that it can become root without having the root password, unlike su? What syscalls, etc. are involved in the process? Is it not a gaping security hole ...
6
votes
3answers
1k views

How can I set up Apache to use port 1 and other ports below 80?

The mysql user cannot use ports below 1024 because these are reserved for the root user. Apache, on the other hand, can use port 80. Apache runs as root before it runs as Apache and thus it can use ...
1
vote
1answer
58 views

How to permit any user (mysql, apache, etc) to use any TCP or UDP port?

How can I ensure that all ports are open to any user? Currently ports 1 to 1024 are reserved for "root" only. Although I am not sure why "apache" is capable of using port "80" if this port too is ...
1
vote
2answers
119 views

How simulate a Windows like admin password prompt in Linux?

I use mint install application a lot but don't think it is safe if I allow the normal user I use to have full privileges over it. I was wondering if there is a way to gain access to this application ...
0
votes
1answer
101 views

chown as non-root user [duplicate]

I tried to chown a file to root, that I own, But my machine says I'm not permitted. I've googled a bit and found a few topics that say chown is a root only command. But others say that's not true. Am ...
1
vote
2answers
51 views

how to determine the permissions of groups?

When you invoke sudo, it prompts for password and then checks the /etc/sudoers configuration file to see if the user is permitted access to run the command. /etc/sudoers is the sudo configuration ...
2
votes
1answer
74 views

Allow non-root unmodifiable sofware to bind to ports 80 & 443

The company I'm in uses the Java Secure Application Manager to "secure" non-internal connections their webmail and electronic collaboration software. Aside from using expired certificates, and ...
1
vote
3answers
207 views

Vim Error 'E212: Cannot open file for writing', when trying to create new files outside of home dir

I am running Wheezy Debian. When I try to create a new file in a directory other than my home directory, such as /var/www, I get the following error in vim: E212: Cannot open file for writing. I ...
3
votes
2answers
81 views

Detecting cron tasks run by another user

I am currently working through the Nebula challenges on exploit-exercises.com, and one of the challenges relies on a script being run by cron. This is run by another user (flag03) and the user I am ...
2
votes
3answers
382 views

How do I drop root privileges in shell scripts?

The "--up" option in OpenVPN is normally used for routing etc. And so it is processed before OpenVPN drops root privileges to run as nobody. However, I am invoking shell scripts that need to run as an ...
0
votes
2answers
706 views

Privileges for jenkins at apache's folder

I'm having issue similar to this: How to copy files as Jenkins "post build" action if i don't have privileges to destination directory I'm willing to move/copy/rsync files from jenkins ...
1
vote
1answer
84 views

Why doesn't setuid not work? [duplicate]

I want my program can only be run by user xyz using root privilege. So I set setuid with: chmod u+s program1.sh ls -l program1.sh rwsr-x--- 1 root house 1299 May 15 23:54 program1.sh And I let user ...
1
vote
1answer
382 views

How to copy files as Jenkins “post build” action if i don't have privileges to destination directory

I have the following users "architecture" : root access is disabled. admin user have access only to its home directory. Apache runs as root service (root is the only one that have access to ...
1
vote
0answers
41 views

Type 1 Hypervisor hardware privileges, make use of host drivers.

I guess a "type 1" hypervisor is one that is running directly on the host's hardware to control the hardware and manage the guest operating systems, so, does that imply that it would be able to make ...
3
votes
2answers
1k views

I'm not getting privileges, edited /etc/sudoers [duplicate]

I want to run any program without asking root password. Because I'm the only person who use the system. So I googled and edited /etc/sudoers. What I did: # chmod 640 /etc/sudoers # vim /etc/sudoers ...
0
votes
1answer
80 views

How can Window Managers shutdown the computer? [duplicate]

When logged in to a virtual shell as an unprivileged user and try to shutdown, reboot, init 0 or init 6 don't work. But if you're running a desktop environment, you can easily select its shutdown ...
3
votes
1answer
163 views

Enable superuser when logged in with another user

Suppose that the machine has two users: Alice (admin) Bob (standard user) While Bob is logged in, how can Alice modify a root file (Bob does not have this permission even with sudo)? Alice tried: ...
1
vote
1answer
59 views

Show who a file is chowned to?

To make things brief: I can chown a file with chown me:mygroup /tmp/file, but how can I see who a file is already chowned to? Something like chown --show-who mabey... Any clean way to see who is ...
2
votes
3answers
161 views

Run script as a different user from root [closed]

From root user, how can I give permissions to another user to execute the file /root/script.sh ? The idea is to run the script like sudo -u user1 /root/script.sh
3
votes
2answers
269 views

Privileged mode in bash

I've used bash for years but I 've stuck with the"privileged mode" that it can be configure with the set command. For example: set -p I've read the bash man page but it's somewhat obscure. For ...
3
votes
2answers
139 views

using SUID bit to drop privileges

So this is a description of the system I'm working on : a "manager" process spawns all the other applications. The manager application runs as root user. so now, any process that it spawns also ...
2
votes
1answer
94 views

impact of allowing Apache to execute some commands on the server

I have an Ubuntu 12 web server running apache2, I developed a graphic interface using PHP to make users able to create their own email account by themselves ( exec() function), so I used visudo to ...
17
votes
6answers
19k views

Linux: allowing an user to listen to a port below 1024

I need to allow an user (different from root) to run a server listening on port 80. Is there any way to do this?
3
votes
3answers
42 views

possibilty of running deamons with under privilaged users while bootup

I have authoritative DNS daemon in my test DNS setup. which is responsible to provide host IP at best choice. Anyway this daemon/process can run by setting some capabilities using setcap and then a ...
1
vote
1answer
67 views

Is it possible to log in in a host with an user created for programs like apache or postgreSQL?

I am wondering whether is it possible to log in in a computer with users like www-data or postgres as I do with my own user. Are some users "allowed to log in" while others not? Is there any ...
3
votes
1answer
115 views

Richacl invalid argument when trying to set atributes

I've compiled a kernel to use richacls, and compiled the richacl's utility, (but not the e2fsprogs). I've mounted a loop file with richacl flags /root/fs_prueba_10mb on /media/ext4_con_richacl type ...
4
votes
2answers
572 views

Purpose of using setuid() in SUID programs

I wonder that an SUID program like passwd is using the setuid() function call. Why does it drop root privileges? Against what types of attack does this help? Buffer-overflow?
2
votes
0answers
537 views

CUPS denies access to printer

I've got a printer hooked up to my workstation (running PCLINUXOS2012) by USB. All was well until the last time I tried to apply updates to the packages - it went rather pear shaped - lots of upgrade ...
4
votes
2answers
162 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
2
votes
1answer
82 views

Keep track of all files accessed by a specific process?

There has recently been a (publicly unconfirmed) report that Skype is accessing files that it shouldn't be, without user intervention. I have no idea if this is the case with Skype on linux, but it ...
1
vote
3answers
654 views

How to gain root privileges for specific user if we have root password? [closed]

Can someone suggest how can I change process privileges in Linux to root ? Assume, I have a normal process running under some user-consider me. Now my script should create some users using 'useradd' ...
2
votes
3answers
195 views

How to create a user account with specific permissions?

I want to create a unix user account with specific permissions: this user must be able to install software, but can't remove software. Furthermore, when the user logs in, root must receive a ...
3
votes
2answers
157 views

why do I have two different results if I run a program through terminal(as root) or /etc/init.d(or /etc/rc.local)

Background: I use Debian Lenny on an embedded device uname -a Linux device 3.4.0 #83 Sun May 26 17:07:14 CEST 2013 armv4l GNU/Linux I have a C code (say my_C_program) that calls a board specific ...
84
votes
7answers
11k views

Which is the safest way to get root privileges: sudo, su or login?

I would like to have the root account in safety even if my unprivileged user is compromised. On Ubuntu you can only use sudo for "security reasons" by default. However I am not sure it is any safer ...
2
votes
0answers
107 views

Understanding getlogin spoofing

My question is in three (or so) related parts: 1) My understanding is that getlogin() will effectively return the auid associated with the process and so isn't actually changable by the user. Is that ...
0
votes
1answer
327 views

Which tasks/commands can't be executed with user gid=0 but not uid=0 on Linux [duplicate]

In a Linux server I will have an user with gid=0 but it's uid won't be 0. As there are many commands with root:root and execute permissions for group I know there will be a lot of administrative task ...
1
vote
1answer
969 views

Safe to change owner of OS X system folders?

I'm trying to get Homebrew to work. That program's diagnosis tool gives me these suggestions: You should probably chown /usr/local/etc ... You should probably chown them: ...
0
votes
3answers
197 views

How to limit administrative privileges to various config files?

I want one administrator to be able to edit the /etc/fstab file but one administrator to not be able to edit the fstab file. Both administrators need access to all other administrative tasks. Is ...
6
votes
4answers
449 views

How do I stop the root user from deleting a file?

I'd like to know if I can prevent the root user from deleting a file. Is it possible?
1
vote
1answer
990 views

Allow all group members to create directories and files

There are 2 users sftp_user apache Both users belong to the updaters group as well as other groups. New directories and files are created in the /updates/ directory. drwxrwsr-x 8 sftp updaters ...
2
votes
1answer
78 views

Using sudo to give access to another account on same machine

There are two unix accounts A and B.I want to execute a unix command from account B such that the command behaves as if it was executed from account A .How can I do this ? The problem here is that ...
2
votes
0answers
332 views

How does Linux Mint 13 GUI (Cinnamon) know which users have administrator privileges?

Recently Cinnamon crashed. And I can no longer: Change settings of network manager Mount any external disks (except by sudo mount ... on command line) Shutdown (only can log out) Click "unlock" on ...
5
votes
5answers
4k views

Drop Process Privileges

I have a process that gets started by a damon running as root, now I want to "downgrade" this process's privileges to those of your average user. Is this possible? If yes how? PS: Running unix on a ...