[5893] in RedHat Linux List
Re: root priveleges without being root
daemon@ATHENA.MIT.EDU (Eric Smith)
Sun Nov 24 20:33:21 1996
Date: 25 Nov 1996 02:19:45 -0000
From: Eric Smith <eric@brouhaha.com>
To: John Banghart <john@mail2.redhat.com>
CC: redhat-list@redhat.com
In-reply-to: <3295F5BC.6B1527BB@future.success.net> (message from John
Banghart on Fri, 22 Nov 1996 13:49:32 -0500)
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
John Banghart <john@mail2.redhat.com> wrote:
> I have a situation where I want users to be able to execute some system
> related commands without having to be root. An example is ndc, the
> program that controls named. I have ndc set uid root, but because the
> user doesn't own the named pid, they can't do anything.
I also wanted to have other people be able to edit the named files and reload
named. I created a group 'dns' (numeric 60 on my machine), and made the
appropriate files and users belong to that group. I then wrote a program
that is installed setuid root, and when run verifies that the user belongs
to group 'dns', then sends a SIGHUP to the named process to reload it. I
didn't provide for any other named operations.
The source code is GPL'd and may be obtained from
ftp://ftp.brouhaha.com/pub/eric/named.reload-0.1.tar.gz
Cheers,
Eric
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
