Very Computer

by **Eric Wag** » Sun, 03 Jun 2001 16:07:55

I'd like to setuid on a script that runs at boot time.

The system is running Solaris 8 (fully patched.)

The user I'd like to have it run as has a shell of /dev/null. I have
tried adding
SU=/bin/su - <username> -c
SU=/bin/su - <username> -c "command to be run"
SU=/bin/su <username> -c
SU=/bin/su <username> -c "command to be run"
to the script.

When ever the process is started/running, it will always come up as
root. My only guess is that the home dir is /dev/null. If this is
the case, what are my options? (Change the shell, don't set it
setuid, etc?)

thanks
eric

by **Eric Wag** » Wed, 06 Jun 2001 02:27:06

I ended up doing a 4744 on the script, and changing the ownership of
files within the directories it was reading.

This worked like a charm.

eric

># I'd like to setuid on a script that runs at boot time.
>#
># The system is running Solaris 8 (fully patched.)
>#
># The user I'd like to have it run as has a shell of /dev/null. I have
># tried adding
># SU=/bin/su - <username> -c
># SU=/bin/su - <username> -c "command to be run"
># SU=/bin/su <username> -c
># SU=/bin/su <username> -c "command to be run"
># to the script.
>#
># When ever the process is started/running, it will always come up as
># root. My only guess is that the home dir is /dev/null. If this is
># the case, what are my options? (Change the shell, don't set it
># setuid, etc?)

>GAK. You could try /bin/false instead of /dev/null.

>But why not use a built-in tool designed for this need?

>The RBAC white paper:

> http://www.sun.com/software/whitepapers/wp-rbac/wp-rbac.pdf

by **Barry Margoli** » Wed, 06 Jun 2001 02:52:59

>I'd like to setuid on a script that runs at boot time.

>The system is running Solaris 8 (fully patched.)

>The user I'd like to have it run as has a shell of /dev/null. I have
>tried adding
>SU=/bin/su - <username> -c
>SU=/bin/su - <username> -c "command to be run"
>SU=/bin/su <username> -c
>SU=/bin/su <username> -c "command to be run"
>to the script.

What's that "SU=" stuff at the beginning of each line?

Quote:>When ever the process is started/running, it will always come up as
>root. My only guess is that the home dir is /dev/null. If this is

The problem isn't the home dir, it's the shell. From the su(1) man page:

The new shell will be the
shell specified in the shell field of username's password
file entry (see passwd(4)).

Quote:>the case, what are my options? (Change the shell, don't set it
>setuid, etc?)

--

Genuity, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

Very Computer

script setuid

script setuid

script setuid

script setuid