Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #230999

Re: setuid question

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On 2021-01-22 at 19:09, Gene Heskett wrote:

> On Friday 22 January 2021 18:35:27 David Christensen wrote:
> 
>>  chmod u+s /usr/local/libexec/amanda/ambind
> 
> root@coyote:amanda-3.5.1$ chmod u+s /usr/local/libexec/amanda/ambind
> root@coyote:amanda-3.5.1$ su amanda -c "/usr/local/sbin/amcheck Daily"
> Amanda Tape Server Host Check
> -----------------------------
> ERROR: program /usr/local/libexec/amanda/ambind: not setuid-root

What does

$ ls -lh /usr/local/libexec/amanda/ambind

say?

All 'chmod u+s' does is set the suid bit. What having that bit does (as
I understand matters) is cause the program to run with the permissions
of the user who owns the file.

If that file is owned by some user other than root, than the suid bit
will just cause it to be run as that other user, which may well not be
enough.

You may also want to check

$ file /usr/local/libexec/amanda/ambind

to confirm whether this program is a script; I've seen cases where
having a script with the suid bit set isn't enough, because it invokes
another binary which isn't and the permissions don't wind up getting
passed along. (Whether that happens typically with scripts I don't know.)

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man.         -- George Bernard Shaw

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 00:30 +0100
  Re: setuid question Larry Martell <larry.martell@gmail.com> - 2021-01-23 00:40 +0100
    Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 01:40 +0100
      Re: setuid question Larry Martell <larry.martell@gmail.com> - 2021-01-23 02:00 +0100
        Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 02:40 +0100
  Re: setuid question David Christensen <dpchrist@holgerdanske.com> - 2021-01-23 00:40 +0100
    Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 01:10 +0100
      Re: setuid question Larry Martell <larry.martell@gmail.com> - 2021-01-23 01:20 +0100
        Re: setuid question Larry Martell <larry.martell@gmail.com> - 2021-01-23 02:20 +0100
        Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 02:20 +0100
      Re: setuid question The Wanderer <wanderer@fastmail.fm> - 2021-01-23 01:20 +0100
        Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 02:20 +0100
    Re: setuid question David Christensen <dpchrist@holgerdanske.com> - 2021-01-23 06:30 +0100
      Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 07:40 +0100
      Re: setuid question Gene Heskett <gheskett@shentel.net> - 2021-01-23 07:50 +0100
        Re: setuid question David Christensen <dpchrist@holgerdanske.com> - 2021-01-23 09:30 +0100
  Re: setuid question Charles Curley <charlescurley@charlescurley.com> - 2021-01-23 01:40 +0100

csiph-web