[clue-tech] Using SUID to downgrade root's access

Dave Brown derynimind at comcast.net
Tue May 24 09:20:58 MDT 2005


Shell scripts in UNIX do not allow the SUID bit, this only works on 
executables. If you want to run a job as "nobody" from cron use the "su 
<username> -c " syntax.

Angelo Bertolli wrote:

>
>
> Dennis J Perkins wrote:
>
>> If you really need SUID, you could probably make a very simple C program
>> that will call the script, then set SUID on that program.  But is it
>> really necessary to use SUID?
>>  
>>
> No, I'm going to look into just running things in cron as another 
> user.  I remember doing that before... actually all I did was set up 
> root's crontab with sudo -u ... maybe I should do that again.
>
> _______________________________________________
> CLUE-tech mailing list
> CLUE-tech at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-tech
>




More information about the clue-tech mailing list