how to mount Usb in solaris 9

capricorn80 · 01-31-2007, 04:32 AM

suppose if i have group id 10 ,12 and 20 and i want that people of group 10,12 and 20 can run the volmgt command. so i do
#include <unistd.h>
#include <stdlib.h>
#define ALLOWED_GROUP 12345 (Edit by me) ALLOWED_GROUP 10,12,20
int main()
{
if(getgid==ALLOWED_GROUP)
{
setuid(0);
setgid(0);
system("/etc/init.d/volmgt stop");
system("/etc/init.d/volmgt start");
}
else
{
fprintf(stderr,"You aren't allowed to restart vold");
exit(1);
}
return 0;
}
and in the end save this as vol.sh and run it as ./vol.sh . so it will work fine ?

capricorn80 · 02-06-2007, 11:09 PM

need reply.

jlliagre · 02-07-2007, 12:42 AM

Quote:

Originally Posted by capricorn80

and in the end save this as vol.sh and run it as ./vol.sh . so it will work fine ?

No, this code is not a shell script but a C program. Moreover, your change is beaking its syntax.

You need to save it with the ".c" extension and compile it to get an executable.

capricorn80 · 02-07-2007, 05:24 AM

#define ALLOWED_GROUP 12345 (Edit by me) ALLOWED_GROUP 10,12,20
i wrote this as an example . i just want to know that if have more then one group then wat should i do as i have 10 , 12 and group 20.
Secondly after gettings its executable wat should i do with that ?

jlliagre · 02-07-2007, 06:48 AM

Quote:

Originally Posted by capricorn80

#define ALLOWED_GROUP 12345 (Edit by me) ALLOWED_GROUP 10,12,20
i wrote this as an example . i just want to know that if have more then one group then wat should i do as i have 10 , 12 and group 20.

You should modify the source code, adding a loop to check against each of these values.

Quote:

Secondly after gettings its executable wat should i do with that ?

change its owner to root
setting its setuid-bit
run it

capricorn80 · 02-12-2007, 02:08 AM

this is rather difficult becuase every time i create a group i have to do changes in script and add that group id to it so that people of that group can execute /etc/init.d/volmgt stop | start .
Is there any other way like we can add permissions to user in Directory Server like we do in Active Directory or any simple way.
Regards.

jlliagre · 02-12-2007, 05:13 AM

You can use an external file storing the list of the groups authorized to run the program, which would have been modified to read this list at run time.

capricorn80 · 02-12-2007, 08:07 AM

again difficult answer.

jlliagre · 02-12-2007, 11:31 AM

What is difficult ?

capricorn80 · 02-15-2007, 02:24 AM

i mean there should be some simple command avaialable which give persmission to all groups to execute the command.
i heard sudo has some thing like that on linux

jlliagre · 02-15-2007, 02:40 AM

This has already been answered in this thread (sudo and alternatives). Feel free to read it from the beginning.