-none- 2007-10-03 - By David Bear
Back
On Wed, Oct 03, 2007 at 06:15:17PM +0530, Ravi Shanmugam wrote:
> Hi All,
>
> I have a query on accessing a root file as a non-root user. The problem
> is described as follows.
>
> I wanted to execute the following command
>
> cat /root/.ssh/id_rsa.pub > /abiscard/local/root/.ssh/authorized_id
think about what you are asking. If a non root user could grab roots
public keys what would be the security risks? I'm not sure but since
the pub keys live in the same directory as the private keys, they will
share the same access protections from the containing directory, which
should be ... rwx...... ie, only root (the owner can read the
contents). You really don't want it any other way.
since, what you really just want is the public key, you can become
root, copy the public key someplace else, like maybe /var/spool/root
?? that say group wheel can read. Then, your backup user (which may be
part of group wheel) could read the key and put it where it can use
it.
>
> as a non-root user i.e "backup" user. Is there any way I could do this.
> This is for my project requirement.
>
> Your reply will be well appriciated.
>
> Regds,
> Ravi R.S
> SASKEN BUSINESS DISCLAIMER
> -- ---- ---- ---- ---- --
> This message may contain confidential, proprietary or legally privileged
information. In
> case you are not the original intended Recipient of the message, you must not
, directly or
> indirectly, use, Disclose, distribute, print, or copy any part of this
message and you are
> requested to delete it and inform the sender. Any views expressed in this
message are
> those of the individual sender unless otherwise stated. Nothing contained in
this message
> shall be construed as an offer or acceptance of any offer by Sasken
Communication
> Technologies Limited ("Sasken") unless sent with that express intent and with
due
> authority of Sasken. Sasken has taken enough precautions to prevent the
spread of
> viruses. However the company accepts no liability for any damage caused by
any virus
> transmitted by this email
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request@(protected)?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
--
David Bear
phone: 602-496-0424
fax: 602-496-0955
College of Public Programs/ASU
University Center Rm 622
411 N Central
Phoenix, AZ 85007-0685
"Beware the IP portfolio, everyone will be suspect of trespassing"
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@(protected)?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
|
|
