LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris and OpenSolaris.
General Sun, SunOS and Sparc related questions also go here.

Notices

Reply
 
Search this Thread
Old 05-29-2009, 07:43 AM   #1
mesiol
Member
 
Registered: Nov 2008
Location: Lower Saxony, Germany
Distribution: CentOS, RHEL, Solaris 10, AIX, HP-UX
Posts: 731

Rep: Reputation: 137Reputation: 137
Process changes effictive UID


Hye All,

i setup a new Solaris 10 system and installed a java software. When starting the software as normal user, the process became owned by root without any reason.

I have a couple of machines running this software with different Solaris version from 8 to 10 Update 6 and all works well. On all this machines the process is running as non-root user except the new one.

I debugged the shell script starting the process, this one does an explicite check that the user is NOT root starting the process.

It's a little bit strange to me what's going on on the new system.

Some system information:
SUN SPARC M4000 running SunOS dbnode1-2517 5.10 Generic_138888-01 sun4u sparc SUNW,SPARC-Enterprise

All help is welcome.
 
Old 05-29-2009, 07:46 AM   #2
crisostomo_enrico
Member
 
Registered: Dec 2005
Location: Madrid
Distribution: Solaris 10, Solaris Express Community Edition
Posts: 547

Rep: Reputation: 35
Well, a little more information would be helpful. Can you tell us which software it is? Can you show us the startup script?
 
Old 05-29-2009, 08:32 AM   #3
mesiol
Member
 
Registered: Nov 2008
Location: Lower Saxony, Germany
Distribution: CentOS, RHEL, Solaris 10, AIX, HP-UX
Posts: 731

Original Poster
Rep: Reputation: 137Reputation: 137
Hye,

it's a call to start a jar file. The script here:
Code:
    jaifhome=/opt/jaif
    akuser=oracle
    waittime=15
    for i in $jaifhome; do
        if [ $waittime -gt 0 ]; then
            echo "waiting $waittime seconds before starting next JAIF instance"
        fi
        /bin/sleep $waittime
        echo starting JAIF in: $i
        cd $i/system
        if [ $akuser = "root" ]; then
            su - $jaifuser -c "$i/system/startjaif.sh >> $i/system/nohup.out 2>> $i/system/nohup.out"
        else
            $i/system/startjaif.sh >> $i/system/nohup.out 2>> $i/system/nohup.out
        fi
    done
The called script startjaif.sh runs
java -jar $jaifhome/jar/jaif.jar

So it's a real easy construct.

As mentioned in my first post, this all works correct on dozen of other SUN Solaris 10 systems, but not here. So i'm not really sure where this behaviour relies on.
 
Old 05-29-2009, 10:15 AM   #4
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,490

Rep: Reputation: 355Reputation: 355Reputation: 355Reputation: 355
You cannot change your uid in (pure) java.

If this really happens, that must have been done by native code and the user account (here oracle) must already have been granted the roles/privileges required to change its own user id.

Alternatively, there might be a unix program called by your java application that has root setuid bit set.
 
  


Reply

Tags
process, root, uid


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Way (ways) to change uid of a process psea Linux - Security 10 03-20-2009 02:27 PM
How to start a process with specific uid/gid during bootup? senthilpr_in Linux - Software 5 05-23-2007 11:22 PM
Process UID Question halfpower Linux - General 1 10-03-2005 12:25 PM
Change UID of process/Privileged ports syntac Linux - General 1 04-17-2003 07:07 AM


All times are GMT -5. The time now is 09:00 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration