Questions tagged [privileges]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
0answers
275 views

How Widely Used is Polkit? [closed]

I'm writing a program that requires root access. I'm hoping to use polkit for privilege escalation instead of just erroring out when the program is not run from root or via sudo. Is polkit used on ...
1
vote
1answer
763 views

Kernel and User space System Calls [closed]

I understand some complex internal of OSes, but I have a large gap in understanding kernel and user space. I will explain how I understand this now. First of all we have RAM for example 8GB, ...
1
vote
2answers
88 views

Reason for requirement for root for package management

In package managers like pacman and apt, the root check is hard coded into source using guid checks. Why is this? A non privileged user can compile a program - let's say chromium browser - from ...
2
votes
3answers
279 views

Why does FreeBSD require terminal programs to be started as root?

On FreeBSD all graphical terminal programs (e.g. xterm, rxvt) seem to be installed setuid root, or with setuid root wrappers. On Linux, this is not the case on any distribution I have ever used. Why ...
4
votes
1answer
925 views

Executing commands in an elevated bash process by writing to the standard input of its parent script process

I have a simple bash script bash.sh that starts another bash instance using pkexec. #!/bin/bash bash -c 'pkexec bash' When executed this shows a prompt for the user to enter their password. The main ...
-1
votes
1answer
539 views

Have I missed anything? user1 is not in the sudoers file [duplicate]

I've created a user on a server where there was only root as: # adduser user1 with a password. Then # su - user1 And then: $ apt-get update E: Could not open lock file /var/lib/apt/lists/lock - ...
0
votes
2answers
132 views

Should I create should my own user with less privileges on a server (Digit. Ocean)?

I'm trying to deploy a website at Digital Ocean. I have the user root as the default. However, since it's root I believe I should create my own, normal user, shouldn't I? Nonetheless, in the ...
15
votes
2answers
7k views

Vulnerability demonstration on Ubuntu 9.04

For a class on IT security, I want to demonstrate privilege escalation to the students. To do so, I looked through the exploit/linux/local list in the Metasploit Framework, finding (among others) ...
51
votes
2answers
131k views

What does the 's' attribute in file permissions mean? [duplicate]

Please compare the following two lines: -rws---r-x 1 root root 21872 2009-10-13 21:06 prg1 -rwx---r-x 1 root root 21872 2009-10-13 21:06 prg2 Does the setuid bit on prg1, along with the read and ...
2
votes
1answer
111 views

How do permissions work with the GUI

There are several things that you must have superuser privileges to do from a terminal that can be done from a normal user account via the gui. e.g. Poweroff/reboot mount/unmount media I understand ...
4
votes
3answers
10k views

How does mmap'ing /dev/mem work despite being from unprivileged mode?

As far as my understanding goes, User space programs run in the unprivileged mode, and thus do not have direct access to memory or I/O. Then how exactly can we directly access memory or I/O locations ...
1
vote
1answer
3k views

Disable “shutdown” and “poweroff” command in Ubuntu

I want to disable "shutdown" and "poweroff" CLI commands in Ubuntu for a specific user. How to do it?
0
votes
1answer
419 views

Access from multiple users to same directory but can't change directory group to a common one

I need to give full access to user1 and user2 to this directory: drwxr-xr-- 3 oracle dba 4096 feb 9 23:16 scripts I can't change directoy group because probably that group is needed for other ...
1
vote
1answer
401 views

Allow file to be read by only system command in a C Program

I have a C program program.c that contains a system("/bin/cat file.txt") command, where file.txt is a file in the same directory as the C program. Now I would like to prevent users to read file.txt by ...
3
votes
2answers
7k views

Allow all group members to create directories and files

There are 2 users sftp_user apache Both users belong to the updaters group as well as other groups. New directories and files are created in the /updates/ directory. drwxrwsr-x 8 sftp ...
0
votes
3answers
99 views

What additional privileges does the root user have over a standard user? [closed]

What additional privileges does the root user have over a standard user in Linux?
1
vote
2answers
63 views

how to give access to other user can access my account?

I have one server X, and having 2 user accounts A and B. How to give user access B to user account A.
3
votes
3answers
6k views

Is it possible to kill another user's program? How?

root can kill any program run by any user. Is it possible for a user to kill another user's program without using sudo, etc.? Example: How can make user foo kill program x which is run by user bar?
15
votes
1answer
18k views

Why does setuid not work? [duplicate]

I want to ensure that my program can only be run by user xyz using root privilege. To do this, I set the setuid bit with: chmod u+s program1.sh ls -l program1.sh rwsr-x--- 1 root house 1299 May 15 23:...
-2
votes
1answer
67 views

Is this a violation? using https service in intranet?

I have CentOS 7 servers in the cloud which is offering HTTPS services. Now this Enterprise can't use our services from the cloud, so they wanted a local intranet solution, the same as I am running in ...
2
votes
0answers
35 views

Sed is unable to copy temporary file to original file [duplicate]

My aim is to edit the file (whose owner is user1) using a script where user2 doesn't have permission to directly edit the file but it should be edited when executed through script by user2. So I set ...
3
votes
1answer
70 views

How many check points in RHEL/CentOS to make sure no one have sudo/root access

I want to make sure no one has sudo access or root access on some production servers. Some points I have also verified like: grep 'x:0:' /etc/passwd grep root /etc/group cat /etc/sudoers key in /root/...
8
votes
6answers
1k views

Allow regular users to SSH using a private key they cannot read

Let's say I have a set of machines (called here the customers' machines) that only a small list of people (called the support staff) is allowed to SSH into, using only one account by machine (the ...
19
votes
1answer
49k views

Allow certain guests to execute certain commands

I would like to create a new user on some of my Debian/Ubuntu hosts that is able to update the server using the commands apt-get update and apt-get dist-upgrade, but I do not wan't to give them full ...
10
votes
3answers
37k views

How to create an unprivileged user in CentOS?

I want to create an unprivileged user to run my RhodeCode server and Celery daemon on a CentOS instance. I think the accepted definition of this is no home directory, login disabled, and no shell ...
0
votes
1answer
103 views

How to configure a user in sudoers such that the user can install app and can't access a specified directory

I want to add a user to sudoers, such that the user can do anything in root permission but: The user can't use mount command; The user can't access(read or write) to directory /home/protecteddir; ...
2
votes
1answer
60 views

How to guard a set of folders from being written into by a specific process?

I would like to have a way in which a set of folders do not allow write access for a particular process. For example, I would love to have a way in which YUM/RPM is not allowed to write into /usr/bin
1
vote
0answers
62 views

Allow move but not put in internal-sftp

is it possible with the internal-sftp to allow mv command from dir A to B but not allow put to A?
4
votes
2answers
3k views

How to update user/group settings of a running process?

Suppose I change some user settings like its initial login group or add it to a new group. I now can do su user and work with these new settings. But all the previously running processes will still ...
9
votes
2answers
37k views

I'm not getting privileges, edited /etc/sudoers [duplicate]

I want to run any program without asking root password. Because I'm the only person who use the system. So I googled and edited /etc/sudoers. What I did: # chmod 640 /etc/sudoers # vim /etc/sudoers ...
0
votes
2answers
142 views

What are the exact powers of a superuser? [closed]

What are the exact powers for a super user? Would the have privileges to disable a standard users ls command? For example: If I ran the command: ls And the output I received was: This is a fake ls!...
3
votes
2answers
10k views

Allow another user to run a specific script as my ID

I have a script somewhere in my home directory. I need to give another user or a group permissions such that when they execute that specific script, it executes as though I am logged in and has all ...
0
votes
1answer
52 views

What are the differences between sudo and the use of groups?

I know these are tools used for improving security. But what I would like to know is what they are and how they work?
5
votes
1answer
2k views

Who can change ACL permissions?

I'm using ACL to control access to individual roots of webs for different instances of Apache and different groups of admins. I've got a Unix group admins-web22 for admins of a particular website and ...
2
votes
2answers
166 views

Keep track of all files accessed by a specific process?

There has recently been a (publicly unconfirmed) report that Skype is accessing files that it shouldn't be, without user intervention. I have no idea if this is the case with Skype on linux, but it ...
1
vote
1answer
840 views

How to run smartctl as root without switching to root?

I have this C code that runs smartctl command and takes its output: #include <iostream> #include <cstdio> #include <cstdlib> using namespace std; int main() { cout << "...
5
votes
2answers
712 views

How do daemons like apache or bind open ports below 1024?

I know that ports below 1024 are protected and can't be opened by a user without sufficient permission. However, I'm wondering how daemons such as bind or apache can do so, though they aren't running ...
2
votes
2answers
370 views

How do I allow privileged commands to fail but respond?

I am reading up on several commands, some of which are privileged and some that may or may not be installed. My system (gentoo) will respond with command not found sometimes when the program in the ...
1
vote
2answers
823 views

Privilege for a linux application

If I write a program on Linux, I have two ways of configuring what privilege the program runs with: It can run with the invoker's privilege (whoever runs the program) I can use setuid so it can run ...
1
vote
2answers
599 views

Bash launch certain commands like being a root user without being root user

I've the following problem. When I launch df command being a usual user of machine it outputs what I need: But when I try to launch it from another user (www-data in this case) I have problems with ...
3
votes
1answer
401 views

USB-Insert Authentication for Linux

On Windows, when I insert a USB, I use USB Security. So I'd get "To allow USB access, enter a password." So I'd have to enter a password to be able to even view USB contents or run it. Is there such ...
2
votes
1answer
106 views

Some commands fail when active display/vt is different from where they are running, How to fix/workaround that?

These applets are running on X at DISPLAY=:0 (fgconsole 7). NetworkApplet Related to nm-applet/NetworkManager run this command sleep 10;nmcli nm enable false;beep (you must be connected to the ...
2
votes
2answers
3k views

How can I configure Linux to not require sudo for specific commands for specific users?

I am sure this question has been asked before but I can't find an answer. I would like to configure Linux so that when I enter specific commands (e.g. apt-get), I wouldn't have to enter password as I ...
1
vote
2answers
578 views

Give group the right to send kill signals

I have a process that a user1 runs. And I need to grant all the group members the right to send some kill signal to it. So far, I always get this output: myProcess(13919): Operation not permitted ...
5
votes
3answers
2k views

Shell/Bash script: Properly drop privileges

Okay, first of all, I know this question has been asked a few times here, but the answers given did not entirely satisfy me. The situation is the following: I have written many scripts to automate ...
2
votes
2answers
1k views

How to disallow file modification time change for non root users

I don't want anybody to create a file then change the creation date to backward date(For example using touch or system call). In my Ubuntu hosting account I'm getting many hacked php code getting ...
1
vote
1answer
288 views

Open a new bash with sudo powers without reentering the password [duplicate]

I find very useful to have more terminal tabs in different current working directories. But if I need sudo privileges I need to reenter the password for every shell. Is there not a way to extend the ...
2
votes
1answer
117 views

How to let a user create a directory although not create a sub directory

I'm trying to create a Bash shell script that allows for the transfer of files from a flash device to a archive in which the user will specify. Although I'd like to restrict this user from not being ...
3
votes
3answers
150 views

Understanding a couple of points regarding root privileges

I just wanted to confirm my understanding of a couple of things related to root privileges. Is it correct that: The user name "administrator" is not a reserved name with implied privileges, it is ...
1
vote
3answers
88 views

What is the mechanism for differentiating root requirements for terminal commands?

In the terminal, some operating system commands require root privileges and some don't. What is the mechanism for controlling this? Is each command actually a separate program with its own execution ...