Root for all

bab258 · 08-28-2007, 01:22 PM

I wrote a program wich using ifconfig utility. So to run my program correctly user must be root. How can I let to run this program for all users in system. Only read and execution allowed.

reddazz · 08-28-2007, 01:30 PM

Not sure if this is safe, but you could make the program setuid e.g.

Code:

#chmod o+s /path/to/prog

acid_kewpie · 08-28-2007, 01:31 PM

well the initial angle you should look at is how to not be in this situation in the first place... what is ifconfig doing? if it's reading data then just reference it absolutely, i.e /sbin/ifconfig and it'll work fine. for actaully making data changes (please explain why if so...) then you could set the script a sticky for the owner (chmod o+s myscript) whch will then allow the ifconfig command to be run as root when it needs to. better still is probably the use of sudo to control access in a more scalable auditable manner.

unSpawn · 08-28-2007, 03:35 PM

Like said before please use Sudo. Introducing more setuid root binaries on your system is not necessary and may pose a security risk.

nx5000 · 08-29-2007, 05:05 AM

On a default system, /sbin/ifconfig *for read access* doesn't need root priv because it reads /proc
It's simply not in the default path of normal users so you need to put the complete path (/sbin/ifconfig)