LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris, OpenSolaris, OpenIndiana, and illumos.
General Sun, SunOS and Sparc related questions also go here. Any Solaris fork or distribution is welcome.

Notices


Reply
  Search this Thread
Old 12-06-2007, 11:26 AM   #1
manoj.linux
Member
 
Registered: Aug 2007
Posts: 284

Rep: Reputation: 17
chmod command


Hi,

I want to create one user who has right to excute chmod command,

Any Idea?
 
Old 12-06-2007, 11:33 AM   #2
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405Reputation: 2405
Hi,

You want to limit the chmod command so that only root and one other user can use chmod? Out of the box chmod can be used by all users.
 
Old 12-06-2007, 11:45 AM   #3
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
Or do you wan't a regular user to be able to chmod any file on the system ?

Last edited by jlliagre; 12-06-2007 at 11:46 AM.
 
Old 12-07-2007, 07:12 AM   #4
manoj.linux
Member
 
Registered: Aug 2007
Posts: 284

Original Poster
Rep: Reputation: 17
Question

Quote:
Originally Posted by jlliagre View Post
Or do you wan't a regular user to be able to chmod any file on the system ?
Yes, I want a regular user to able to run chmod command for a specified path.

For example : User "A" want to change the permission of User"B"\test\ Like that
 
Old 12-07-2007, 09:34 AM   #5
choogendyk
Senior Member
 
Registered: Aug 2007
Location: Massachusetts, USA
Distribution: Solaris 9 & 10, Mac OS X, Ubuntu Server
Posts: 1,197

Rep: Reputation: 105Reputation: 105
we use sudo to allow the webmaster to change permissions on files in the web tree.
 
Old 12-07-2007, 10:11 AM   #6
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
Allowing a user to change the permission of any file is the same as granting him full root access.
 
Old 12-08-2007, 02:21 PM   #7
choogendyk
Senior Member
 
Registered: Aug 2007
Location: Massachusetts, USA
Distribution: Solaris 9 & 10, Mac OS X, Ubuntu Server
Posts: 1,197

Rep: Reputation: 105Reputation: 105
Quote:
Originally Posted by choogendyk View Post
we use sudo to allow the webmaster to change permissions on files in the web tree.
jlliagre is absolutely correct, and I spoke too quickly. What we actually do is somewhat different, exactly for the security reasons. People in the web group are able to upload files to the web tree. Depending on the tools they use, the ownership and permissions sometimes get screwed up. We have a perl script written by a senior admin that the web administrator is allowed to run. That perl script is owned by root, is not suid, requires sudo for someone else to run, and it fixes the ownership and permissions of specified files if and only if they are in the web tree. It specifically does not give the person unbridled access to chmod. That would allow someone to upload a script (or make a copy of the shell) and make it suid root, thus gaining control of the system.

So, bottom line for the OP, if you give this one user the right to unbridled use of chmod, you might as well just give them the root password.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
CHMOD Command Issues ecko! Linux - Newbie 3 09-19-2006 12:22 PM
chmod command on linux yinglcs Linux - Newbie 4 01-13-2006 06:53 PM
CHMOD Command dudeman41465 Linux - Software 1 09-26-2005 03:29 AM
chmod command linuxtesting2 Linux - Newbie 2 09-03-2004 01:02 PM
Chmod command gogo Linux - General 2 09-24-2002 08:01 AM

LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris

All times are GMT -5. The time now is 08:15 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration