Questions tagged [privileges]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
3answers
89 views

What is the mechanism for differentiating root requirements for terminal commands?

In the terminal, some operating system commands require root privileges and some don't. What is the mechanism for controlling this? Is each command actually a separate program with its own execution ...
2
votes
2answers
3k views

How does the script /etc/init.d/sudo work?

I was reading the script /etc/init.d/sudo. It has been written as a comment in the script that it provides limited super user privileges to specific users. Though, I could not understand the script ...
2
votes
1answer
166 views

How to permit any user (mysql, apache, etc) to use any TCP or UDP port?

How can I ensure that all ports are open to any user? Currently ports 1 to 1024 are reserved for "root" only. Although I am not sure why "apache" is capable of using port "80" if this port too is ...
1
vote
2answers
492 views

How simulate a Windows like admin password prompt in Linux?

I use mint install application a lot but don't think it is safe if I allow the normal user I use to have full privileges over it. I was wondering if there is a way to gain access to this application ...
0
votes
1answer
1k views

chown as non-root user [duplicate]

I tried to chown a file to root, that I own, But my machine says I'm not permitted. I've googled a bit and found a few topics that say chown is a root only command. But others say that's not true. Am ...
3
votes
1answer
919 views

Allow non-root unmodifiable sofware to bind to ports 80 & 443

The company I'm in uses the Java Secure Application Manager to "secure" non-internal connections their webmail and electronic collaboration software. Aside from using expired certificates, and ...
1
vote
1answer
6k views

How to copy files as Jenkins “post build” action if i don't have privileges to destination directory

I have the following users "architecture" : root access is disabled. admin user have access only to its home directory. Apache runs as root service (root is the only one that have access to web-...
1
vote
0answers
79 views

Type 1 Hypervisor hardware privileges, make use of host drivers.

I guess a "type 1" hypervisor is one that is running directly on the host's hardware to control the hardware and manage the guest operating systems, so, does that imply that it would be able to make ...
0
votes
1answer
169 views

How can Window Managers shutdown the computer? [duplicate]

When logged in to a virtual shell as an unprivileged user and try to shutdown, reboot, init 0 or init 6 don't work. But if you're running a desktop environment, you can easily select its shutdown ...
3
votes
1answer
330 views

Enable superuser when logged in with another user

Suppose that the machine has two users: Alice (admin) Bob (standard user) While Bob is logged in, how can Alice modify a root file (Bob does not have this permission even with sudo)? Alice tried: $...
10
votes
3answers
39k views

Run script as a different user from root [closed]

From root user, how can I give permissions to another user to execute the file /root/script.sh ? The idea is to run the script like sudo -u user1 /root/script.sh
5
votes
2answers
4k views

Privileged mode in bash

I've used bash for years but I 've stuck with the"privileged mode" that it can be configure with the set command. For example: set -p I've read the bash man page but it's somewhat obscure. For ...
4
votes
2answers
1k views

using SUID bit to drop privileges

So this is a description of the system I'm working on : a "manager" process spawns all the other applications. The manager application runs as root user. so now, any process that it spawns also ...
2
votes
1answer
281 views

impact of allowing Apache to execute some commands on the server

I have an Ubuntu 12 web server running apache2, I developed a graphic interface using PHP to make users able to create their own email account by themselves ( exec() function), so I used visudo to ...
1
vote
1answer
119 views

Is it possible to log in in a host with an user created for programs like apache or postgreSQL?

I am wondering whether is it possible to log in in a computer with users like www-data or postgres as I do with my own user. Are some users "allowed to log in" while others not? Is there any ...
3
votes
1answer
200 views

Richacl invalid argument when trying to set atributes

I've compiled a kernel to use richacls, and compiled the richacl's utility, (but not the e2fsprogs). I've mounted a loop file with richacl flags /root/fs_prueba_10mb on /media/ext4_con_richacl type ...
6
votes
2answers
4k views

Purpose of using setuid() in SUID programs

I wonder that an SUID program like passwd is using the setuid() function call. Why does it drop root privileges? Against what types of attack does this help? Buffer-overflow?
2
votes
0answers
3k views

CUPS denies access to printer

I've got a printer hooked up to my workstation (running PCLINUXOS2012) by USB. All was well until the last time I tried to apply updates to the packages - it went rather pear shaped - lots of upgrade ...
4
votes
2answers
259 views

How to run script with the privileges expected of the script's general “intended user”?

During the development of a script, some bugs remain "latent" until the script is run by a different user. (For example, the script may access a file that only the person developing the script has ...
2
votes
3answers
869 views

How to create a user account with specific permissions?

I want to create a unix user account with specific permissions: this user must be able to install software, but can't remove software. Furthermore, when the user logs in, root must receive a ...
4
votes
2answers
358 views

why do I have two different results if I run a program through terminal(as root) or /etc/init.d(or /etc/rc.local)

Background: I use Debian Lenny on an embedded device uname -a Linux device 3.4.0 #83 Sun May 26 17:07:14 CEST 2013 armv4l GNU/Linux I have a C code (say my_C_program) that calls a board specific ...
2
votes
0answers
182 views

Understanding getlogin spoofing [duplicate]

My question is in three (or so) related parts: 1) My understanding is that getlogin() will effectively return the auid associated with the process and so isn't actually changable by the user. Is that ...
1
vote
1answer
1k views

Safe to change owner of OS X system folders?

I'm trying to get Homebrew to work. That program's diagnosis tool gives me these suggestions: You should probably chown /usr/local/etc ... You should probably chown them: /usr/local/...
0
votes
3answers
1k views

How to limit administrative privileges to various config files?

I want one administrator to be able to edit the /etc/fstab file but one administrator to not be able to edit the fstab file. Both administrators need access to all other administrative tasks. Is ...
8
votes
4answers
2k views

How do I stop the root user from deleting a file?

I'd like to know if I can prevent the root user from deleting a file. Is it possible?
3
votes
1answer
103 views

Using sudo to give access to another account on same machine

There are two unix accounts A and B.I want to execute a unix command from account B such that the command behaves as if it was executed from account A .How can I do this ? The problem here is that ...
2
votes
0answers
439 views

How does Linux Mint 13 GUI (Cinnamon) know which users have administrator privileges?

Recently Cinnamon crashed. And I can no longer: Change settings of network manager Mount any external disks (except by sudo mount ... on command line) Shutdown (only can log out) Click "unlock" on ...
11
votes
3answers
21k views

How does the set-user-ID mechanism work in Unix?

Can someone please explain the set-user-ID mechanism in Unix ? What was the rationale behind this design decision? How is it different from effective user id mechanism ?
13
votes
1answer
4k views

root owned program with setuid bit on

Ping is a a program owned by root with the user id bit set. $ ls -l `which ping` -rwsr-xr-x 1 root root 35752 Nov 4 2011 /bin/ping As I understand it, if a user runs the ping process, then the ...
2
votes
3answers
5k views

Switching to superuser while shell script is running

I have a shell script that contains the following lines: CURRENT_USER=${USER} echo $CURRENT_USER su echo switch to `who am i` Once the 2nd line is executed, the shell prompts me to enter the root ...
6
votes
1answer
461 views

How do DE's call ACPI functions?

Okay, first off, this is not a problem I am facing, but I would like to understand this better. If I wish to shutdown / reboot my machine from the command line I need to call: $ sudo poweroff $ sudo ...
4
votes
1answer
2k views

Insufficient privileges in NetworkManager with xmonad

I have problem with Network Manager in xmonad. Let's say I want to connect to a new wireless network. When I try to do so, error is displayed, saying: "insufficient privileges". But when I try do do ...
2
votes
1answer
1k views

Ubuntu 11.10 Server: create user, home directory, sudo privileges: command line only

I have a rackspace server and I'm having problems with configuration. I need to lock it down and throw away the key, because right now I can only login with root to do anything substantial. I also am ...
2
votes
3answers
805 views

What was superuser password set? [duplicate]

Possible Duplicate: Is there a root password on OS X and Ubuntu? After I installed Ubuntu, I noticed that I'm not sure what was superuser password set, If I set it at all. I know that I created a ...
-1
votes
1answer
269 views

How to give regular users the write privilege to an external drive? [duplicate]

Possible Duplicate: Mount permissions always blocked I'm using a scilinux machine. Whenever I connect an external drive, it is mounted as read only (and the root has full access). What and how ...
10
votes
2answers
26k views

Launch process as another user/group (in init.d script)

I am editing a init.d script. The init.d script runs a utility script which then runs an process. From either bash scripts how would I make it launch the main process as a specific user and group?
4
votes
1answer
1k views

How to disable certain system calls for a given user?

I am creating a web app similar to codepad and for each run-action my app copies a directory (/home/radeks/voidptr/private/chroot-root) to /tmp/voidptr/[random-id]/chroot-root. This chroot directory ...
6
votes
2answers
3k views

Alternative to su/sudo on barebone system

I'd like to run some unit tests in a barebone chroot jail on Solaris. There's no su or sudo, and a copy of su (with libpam.so.1) just returns exit code 1 without any output, with or without parameters....