Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.unix.programmer > #870

Re: Why user can change password?

From jt@toerring.de (Jens Thoms Toerring)
Newsgroups comp.unix.programmer
Subject Re: Why user can change password?
Date 2011-06-29 09:55 +0000
Organization Freie Universitaet Berlin
Message-ID <970b56FivfU1@mid.uni-berlin.de> (permalink)
References <8d6a4a86-6fdf-4183-bfba-5ed322a98195@u28g2000yqf.googlegroups.com>

Show all headers | View raw


Mateusz_madi <madi.czadi@gmail.com> wrote:
> Hi, why usre cna change his pasword using passwd if he don't have
> access to /etc/shadow ?

Because the 'passwd' program has special privileges when it's
running. If you do

> ls -l /usr/bin/passwd 
-rwsr-xr-x 1 root root 42856 2011-02-14 23:11 /usr/bin/passwd

you will notice the 's' instead of an 'x' in the permissions
for the owner of this program (root). This indicates that this
program is 'setuid'-ed, i.e. it will run with the permissions
of the owner of the program instead your more restricted user
permissions. A Google search for 'setuid' will give you a lot
of additional information.
                               Regards, Jens
-- 
  \   Jens Thoms Toerring  ___      jt@toerring.de
   \__________________________      http://toerring.de

Back to comp.unix.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Why user can change password? Mateusz_madi <madi.czadi@gmail.com> - 2011-06-29 02:44 -0700
  Re: Why user can change password? jt@toerring.de (Jens Thoms Toerring) - 2011-06-29 09:55 +0000
  Re: Why user can change password? Ben Finney <ben+unix@benfinney.id.au> - 2011-06-29 22:36 +1000
    Re: Why user can change password? jt@toerring.de (Jens Thoms Toerring) - 2011-06-29 15:03 +0000
  Re: Why user can change password? John Gordon <gordon@panix.com> - 2011-06-29 14:41 +0000
    Re: Why user can change password? Golden California Girls <gldncagrls@aol.com.mil> - 2011-06-29 18:42 -0700
      Re: Why user can change password? Barry Margolin <barmar@alum.mit.edu> - 2011-06-29 22:29 -0400
      Re: Why user can change password? Eric Sosman <esosman@ieee-dot-org.invalid> - 2011-06-29 22:29 -0400
      Re: Why user can change password? gordonb.h6afl@burditt.org (Gordon Burditt) - 2011-06-29 22:10 -0500
      Re: Why user can change password? Nobody <nobody@nowhere.com> - 2011-06-30 18:10 +0100

csiph-web