Printable View
Hello, there is a program, called "theprogram" with the following permissions owned by userA:
-r-sr-sr-x 1 userA userA
This program simply echoes a message and exits. As userB I do the following:
while true; do ./theprogram; done
In another window the top command shows "theprogram" being run as userB who is executing it instead of userA who is the owner. My question is - does this happen because of the command line while loop?
the linux kernel has not allowed scripts to run with suid set for some time (for security reasons). to get around this, people typically set up sudo and allow the particular user to run the specified program as whoever they want. you can do w/this without requiring a password, btw.
if you really want suid-like functionality, then you can wrap your shell command(s) in a C prog. that compiled prog will happily run as suid whoever, security be damned.
Thank you, I knew about the security restrictions on scripts but I did not realize that command line stuff fell into that category. Thanks for the validation.
Follow up question that I should have asked before... Is there a way to call a SUID program, such as one with the permissions shown above, in a loop so that it executes as the owner instead of the current user? I tried a C program with both popen and system and the program in question is executed as me instead of the program owner.
do you have the suid filesystem option enabled for the filesystem upon which your file resides? by default, it is supposed to be enabled, but it did not work for me until I explicitly mounted my filesystem with mount -o suid ...
if you've got that straight, then all you should need is the suid flag set. how are you verifying that the program is not run as the user you want? what does the prog do?
The way I've been verifying is just by looking at the output from the top command which has a column for user on the left. The program is being run under my username instead of the user who owns it. The program itself just reads from a file, outputs the text and exits. Its just a test program. I tried from both a commandline while loop and a for loop+system call in a small C progrem so I'm assuming that they fall under the scripting security settings.
okay. did you check the suid option on the filesystem? or at least make sure that nosuid is NOT set? you can just run the "mount" command, or look at /proc/mounts.Quote:
Originally Posted by Player_0
Quote:
Hello, there is a program, called "theprogram" with the following permissions owned by userA:
-r-sr-sr-x 1 userA userA
This program simply echoes a message and exits. As userB I do the following:
while true; do ./theprogram; done
In another window the top command shows "theprogram" being run as userB who is executing it instead of userA who is the owner. My question is - does this happen because of the command line while loop?
If you have used any command in your script then you'll have problems with SUID bit, because ownership of that command also matters.