 | | | chmod +s not working as expected | chmod +s not working as expected 2003-11-27 - By James Ho
Back
Yep, its the same Id. No problems there. Anyway I think its caused by
the new kernel (Version 7.3). Red Hat probably made it more secure
and therefore disabled what they might have considered a security flaw.
I have decided to use SUDO instead. It seems to be functioning as how
I have hoped, even if not exactly.
Thanks.
-- -- Original Message -- --
From: Girish Radhakrishnan
To: valhalla-list@(protected)
Sent: Friday, November 28, 2003 6:56 AM
Subject: Re: chmod +s not working as expected
Hi James,
Could you please check the User ID of both users in the redHat 7.3 and 6.2.
Looks like the user ID is messed up. Are the /etc/passwd user ids the same
for both 6.2 and 7.3 machine?
-Girish
----Original Message Follows----
From: "James Ho" <james.ho@(protected)>
Reply-To: valhalla-list@(protected)
To: <valhalla-list@(protected)>
Subject: Re: chmod +s not working as expected
Date: Thu, 27 Nov 2003 15:25:08 +0800
MIME-Version: 1.0
Received: from mc1-f12.hotmail.com ([64.4.50.19]) by mc1-s11.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6713); Wed, 26 Nov 2003 23:26:35 -0800
Received: from hormel.redhat.com ([66.187.233.30]) by mc1-f12.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6713); Wed, 26 Nov 2003 23:26:35 -0800
Received: from listman.back-rdu.redhat.com (listman.back-rdu.redhat.com
[10.10.2.136])by hormel.redhat.com (Postfix) with ESMTPid E351C13620C; Thu,
27 Nov 2003 02:26:32 -0500 (EST)
Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com
[172.16.52.254])by listman.back-rdu.redhat.com (8.11.6/8.11.6) with ESMTP id
hAR7JIR27584for <valhalla-list@(protected)>; Thu, 27 Nov
2003 02:19:18 -0500
Received: (from mail@(protected))by int-mx1.corp.redhat.com (8.11.6/8.11.6) id
hAR7Pmc01908for valhalla-list@(protected); Thu, 27 Nov 2003
02:25:48 -0500
Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31])by
int-mx1.corp.redhat.com (8.11.6/8.11.6) with SMTP id hAR7Pmw01904for
<valhalla-list@(protected)>; Thu, 27 Nov 2003 02:25:48 -0500
Received: from financialzoo.com ([61.6.65.4])by mx1.redhat.com
(8.11.6/8.11.6) with SMTP id hAR7PkH18548for <valhalla-list@(protected)>;
Thu, 27 Nov 2003 02:25:47 -0500
Received: from james ([61.6.65.2])by financialzoo.com (financialzoo.com
[61.6.65.4])(MDaemon.PRO.v6.8.5.R)with ESMTP id 3-md50000000003.tmpfor
<valhalla-list@(protected)>; Thu, 27 Nov 2003 15:26:13 +0800
X-Message-Info: oZ2qq1sZ3e7uKTlpeu1aTGroa8adSyNR1xsbOF+BWhA=
Message-ID: <005201c3b4b7$96e4d5a0$5913080a@(protected)>
References: <1069797883.3fc3d1fb39280@(protected)>
<200311261118.34394.blkline@(protected)>
<1069867481.3fc4e1d9f3d37@(protected)>
<003d01c3b4b2$1e73f4c0$5913080a@(protected)>
<20031127071941.GA9504@(protected)>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
X-Spam-Processed: financialzoo.com, Thu, 27 Nov 2003 15:26:13 +0800(not
processed: message from valid local sender)
X-MDRemoteIP: 61.6.65.2
X-Return-Path: james.ho@(protected)
X-MDaemon-Deliver-To: valhalla-list@(protected)
X-Loop: valhalla-list@(protected)
Sender: valhalla-list-admin@(protected)
Errors-To: valhalla-list-admin@(protected)
X-BeenThere: valhalla-list@(protected)
X-Mailman-Version: 2.0.13
Precedence: junk
List-Help: <mailto:valhalla-list-request@(protected)?subject=help>
List-Post: <mailto:valhalla-list@(protected)>
List-Subscribe:
<https://www.redhat.com/mailman/listinfo/valhalla-list>,<mailto:valhalla-list
-request@(protected)?subject=subscribe>
List-Id: Discussion of Red Hat Linux 7.3 (Valhalla)
<valhalla-list.redhat.com>
List-Unsubscribe:
<https://www.redhat.com/mailman/listinfo/valhalla-list>,<mailto:valhalla-list
-request@(protected)?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/valhalla-list/>
Return-Path: valhalla-list-admin@(protected)
X-OriginalArrivalTime: 27 Nov 2003 07:26:35.0500 (UTC)
FILETIME=[C9D992C0:01C3B4B7]
nope... does not work.
-- -- Original Message -- --
From: Cameron Simpson
To: valhalla-list@(protected)
Sent: Thursday, November 27, 2003 3:19 PM
Subject: Re: chmod +s not working as expected
On 14:45 27 Nov 2003, James Ho <james.ho@(protected)> wrote:
| I just transported a program from Red Hat Linux 6.2 to Red Hat Linux
7.3.
| The C program has a line stating:
| system ("whoami");
|
| The permission of the executable is 6777 (ie. -rwsrwsrwx) and the
| owner of the program is "user1".
|
| Using another user login "user99", I execute the program in both Red
Hat
| Linux 6.2 and 7.3.
| In 6.2, I get the output "user1"
| In 7.3, I get the output "user99"
|
| Why is this? Is there any way I can get the program work as it did
| in Red Hat Linux 6.2?
I can imagine the kernel not allowing setuid to work on a publicly
writable file. The 7.3 box will have a newer (==> maybe more paranoid)
kernel. Try making the permissions 6555 or 6111 and see how it behaves.
Cheers,
--
Cameron Simpson <cs@(protected)> DoD#743
http://www.cskk.ezoshosting.com/cs/
If you 'aint falling off, you ar'nt going hard enough. - Fred Gassit
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
Valhalla-list mailing list
Valhalla-list@(protected)
https://www.redhat.com/mailman/listinfo/valhalla-list
__ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ __
online games and music with a high-speed Internet connection! Prices start
at less than $1 a day average. https://broadband.msn.com (Prices may vary
by service area.)
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
Valhalla-list mailing list
Valhalla-list@(protected)
https://www.redhat.com/mailman/listinfo/valhalla-list
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859 (See http://iso-8859.ora-code.com)-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Yep, its the same Id. No problems there. Anyway I
think its caused by</FONT></DIV>
<DIV><FONT face=Arial size=2>the new kernel (Version 7.3). Red Hat probably
made
it more secure</FONT></DIV>
<DIV><FONT face=Arial size=2>and therefore disabled what they might have
considered a security flaw.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have decided to use SUDO instead. It seems to be
functioning as how</FONT></DIV>
<DIV><FONT face=Arial size=2>I have hoped, even if not exactly.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks.</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT:
#000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">-- -- Original Message -- -- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=rgirish@(protected) href="mailto:rgirish@(protected)">Girish
Radhakrishnan</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=valhalla-list@(protected)
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Friday, November 28, 2003 6:56
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: chmod +s not working as
expected</DIV>
<DIV><BR></DIV>Hi James,<BR><BR>Could you please check the User ID of both
users in the redHat 7.3 and 6.2.<BR><BR>Looks like the user ID is messed up.
Are the /etc/passwd user ids the same <BR>for both 6.2 and 7.3
machine?<BR><BR>-Girish<BR><BR><BR>----Original Message Follows----<BR>From:
"James Ho" <<A
href="mailto:james.ho@(protected)">james.ho@(protected)</A>><BR
>Reply-To:
<A href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A><BR>To:
<<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A>><BR
>Subject:
Re: chmod +s not working as expected<BR>Date: Thu, 27 Nov 2003 15:25:08
+0800<BR>MIME-Version: 1.0<BR>Received: from mc1-f12.hotmail.com
([64.4.50.19]) by mc1-s11.hotmail.com <BR>with Microsoft
SMTPSVC(5.0.2195.6713); Wed, 26 Nov 2003 23:26:35 -0800<BR>Received: from
hormel.redhat.com ([66.187.233.30]) by mc1-f12.hotmail.com <BR>with Microsoft
SMTPSVC(5.0.2195.6713); Wed, 26 Nov 2003 23:26:35 -0800<BR>Received: from
listman.back-rdu.redhat.com (listman.back-rdu.redhat.com <BR>[10.10.2.136])by
hormel.redhat.com (Postfix) with ESMTPid E351C13620C; Thu, <BR>27 Nov 2003
02:26:32 -0500 (EST)<BR>Received: from int-mx1.corp.redhat.com
(int-mx1.corp.redhat.com <BR>[172.16.52.254])by listman.back-rdu.redhat.com
(8.11.6/8.11.6) with ESMTP id <BR>hAR7JIR27584for <<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)
.back-rdu.redhat.com</A>>;
Thu, 27 Nov <BR>2003 02:19:18 -0500<BR>Received: (from <A
href="mailto:mail@(protected))by">mail@(protected))by</A> int-mx1.corp.redhat.com
(8.11.6/8.11.6) id <BR>hAR7Pmc01908for <A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)
.back-rdu.redhat.com</A>;
Thu, 27 Nov 2003 <BR>02:25:48 -0500<BR>Received: from mx1.redhat.com
(mx1.redhat.com [172.16.48.31])by <BR>int-mx1.corp.redhat.com (8.11.6/8.11.6)
with SMTP id hAR7Pmw01904for <BR><<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A>>; Thu,
27 Nov 2003 02:25:48 -0500<BR>Received: from financialzoo.com ([61.6.65.4])by
mx1.redhat.com <BR>(8.11.6/8.11.6) with SMTP id hAR7PkH18548for <<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A>>;
<BR>Thu, 27 Nov 2003 02:25:47 -0500<BR>Received: from james ([61.6.65.2])by
financialzoo.com (financialzoo.com <BR>[61.6.65.4])(MDaemon.PRO.v6.8.5.R)with
ESMTP id 3-md50000000003.tmpfor <BR><<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A>>; Thu,
27 Nov 2003 15:26:13 +0800<BR>X-Message-Info:
oZ2qq1sZ3e7uKTlpeu1aTGroa8adSyNR1xsbOF+BWhA=<BR>Message-ID: <<A
href="mailto:005201c3b4b7$96e4d5a0$5913080a@(protected)">005201c3b4b7
$96e4d5a0$5913080a@(protected)</A>><BR>References:
<<A
href="mailto:1069797883.3fc3d1fb39280@(protected)">1069797883.3fc3d1fb39280
@(protected)</A>>
<BR><<A
href="mailto:200311261118.34394.blkline@(protected)">200311261118.34394
.blkline@(protected)</A>>
<BR><<A
href="mailto:1069867481.3fc4e1d9f3d37@(protected)">1069867481.3fc4e1d9f3d37
@(protected)</A>>
<BR><<A
href="mailto:003d01c3b4b2$1e73f4c0$5913080a@(protected)">003d01c3b4b2
$1e73f4c0$5913080a@(protected)</A>>
<BR><<A
href="mailto:20031127071941.GA9504@(protected)">20031127071941.GA9504
@(protected)</A>><BR>X-Priority:
3<BR>X-MSMail-Priority: Normal<BR>X-Mailer: Microsoft Outlook Express
5.00.2615.200<BR>X-MimeOLE: Produced By Microsoft MimeOLE
V5.00.2615.200<BR>X-Spam-Processed: financialzoo.com, Thu, 27 Nov 2003
15:26:13 +0800(not <BR>processed: message from valid local
sender)<BR>X-MDRemoteIP: 61.6.65.2<BR>X-Return-Path: <A
href="mailto:james.ho@(protected)">james.ho@(protected)</A><BR>X
-MDaemon-Deliver-To:
<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A><BR>X-Loop
:
<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A><BR>Sender
:
<A
href="mailto:valhalla-list-admin@(protected)">valhalla-list-admin@(protected)<
/A><BR>Errors-To:
<A
href="mailto:valhalla-list-admin@(protected)">valhalla-list-admin@(protected)<
/A><BR>X-BeenThere:
<A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A><BR>X
-Mailman-Version:
2.0.13<BR>Precedence: junk<BR>List-Help: <<A
href="mailto:valhalla-list-request@(protected)?subject=help">mailto:valhalla
-list-request@(protected)?subject=help</A>><BR>List-Post:
<<A
href="mailto:valhalla-list@(protected)">mailto:valhalla-list@(protected)</A>>
;<BR>List-Subscribe:
<BR><<A
href="https://www.redhat.com/mailman/listinfo/valhalla-list>,<mailto:valhalla
-list-request@(protected)?subject=subscribe">https://www.redhat.com/mailman
/listinfo/valhalla-list>,<mailto:valhalla-list-request@(protected)?subject
=subscribe</A>><BR>List-Id:
Discussion of Red Hat Linux 7.3 (Valhalla)
<BR><valhalla-list.redhat.com><BR>List-Unsubscribe: <BR><<A
href="https://www.redhat.com/mailman/listinfo/valhalla-list>,<mailto:valhalla
-list-request@(protected)?subject=unsubscribe">https://www.redhat.com/mailman
/listinfo/valhalla-list>,<mailto:valhalla-list-request@(protected)?subject
=unsubscribe</A>><BR>List-Archive:
<<A
href="https://www.redhat.com/archives/valhalla-list/">https://www.redhat.com
/archives/valhalla-list/</A>><BR>Return-Path:
<A
href="mailto:valhalla-list-admin@(protected)">valhalla-list-admin@(protected)<
/A><BR>X-OriginalArrivalTime:
27 Nov 2003 07:26:35.0500 (UTC)
<BR>FILETIME=[C9D992C0:01C3B4B7]<BR><BR>nope... does not work.<BR>  
;
-- -- Original Message -- --<BR> From: Cameron
Simpson<BR> To: <A
href="mailto:valhalla-list@(protected)">valhalla-list@(protected)</A><BR>
Sent: Thursday, November 27, 2003 3:19 PM<BR> Subject: Re: chmod
+s not working as expected<BR><BR><BR> On 14:45 27 Nov 2003,
James
Ho <<A
href="mailto:james.ho@(protected)">james.ho@(protected)</A>>
wrote:<BR> | I just transported a program from Red Hat Linux 6.2
to Red Hat Linux <BR>7.3.<BR> | The C program has a line
stating:<BR> |
system ("whoami");<BR> |<BR> | The permission of the
executable is 6777 (ie. -rwsrwsrwx) and the<BR> | owner of the
program is "user1".<BR> |<BR> | Using another user
login "user99", I execute the program in both Red <BR>Hat<BR> |
Linux 6.2 and 7.3.<BR> | In 6.2, I get
the
output "user1"<BR> | In 7.3, I get the
output "user99"<BR> |<BR> | Why is this? Is there any
way I can get the program work as it did<BR> | in Red Hat Linux
6.2?<BR><BR> I can imagine the kernel not allowing setuid to work
on a publicly<BR> writable file. The 7.3 box will have a newer
(==> maybe more paranoid)<BR> kernel. Try making the
permissions 6555 or 6111 and see how it behaves.<BR><BR>
Cheers,<BR> --<BR> Cameron Simpson <<A
href="mailto:cs@(protected)">cs@(protected)</A>> DoD#743<BR> <A
href="http://www.cskk.ezoshosting.com/cs/">http://www.cskk.ezoshosting.com/cs
/</A><BR><BR>
If you 'aint falling off, you ar'nt going hard enough. - Fred
Gassit<BR><BR><BR>
__ ____ ____ ____ ____ ____ ____ ____ ____ ____<BR> Valhalla-list
mailing list<BR> <A
href="mailto:Valhalla-list@(protected)">Valhalla-list@(protected)</A><BR>
<A
href="https://www.redhat.com/mailman/listinfo/valhalla-list">https://www
.redhat.com/mailman/listinfo/valhalla-list</A><BR><BR>__ ____ ____ ____ ____ ___
__ ____ ____ ____ ____ ____ ____ ______<BR>online
games and music with a high-speed Internet connection! Prices start
<BR>at less than $1 a day average. <A
href="https://broadband.msn.com">https://broadband.msn.com</A> (Prices may
vary <BR>by service
area.)<BR><BR><BR>__ ____ ____ ____ ____ ____ ____ ____ ____ ____<BR>Valhalla
-list
mailing list<BR><A
href="mailto:Valhalla-list@(protected)">Valhalla-list@(protected)</A><BR><A
href="https://www.redhat.com/mailman/listinfo/valhalla-list">https://www
.redhat.com/mailman/listinfo/valhalla-list</A><BR></BLOCKQUOTE></BODY></HTML>
|
|
|