topic Re: How to launch a program that requires root privileges while logged on as regular user. in Operating System - HP-UX

How to launch a program that requires root privileges while logged on as regular user.

Daniel Simard — Wed, 16 Apr 2003 11:22:09 GMT

Hello All,
The program in perticular is /opt2/openv/netbackup/bin/jnbSA which is veritas netbackup datacenter 4.5

I'd like to have regular unix users be able to execute this program but as root. I'm not sure if it has to do with sudo'ing.

All help is appreciated.

Re: How to launch a program that requires root privileges while logged on as regular user.

Zafar A. Mohammed_1 — Wed, 16 Apr 2003 11:25:36 GMT

Yes, it comes under sudo. If the root give privileges to normal user to execute then it can be possible.

Thanks
Zafar

Re: How to launch a program that requires root privileges while logged on as regular user.

Zafar A. Mohammed_1 — Wed, 16 Apr 2003 11:27:30 GMT

Even sudo alias also. Check this link also might be helpful.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x6b1b9607df6ed711abdc0090277a778c,00.html

Thanks
Zafar

Re: How to launch a program that requires root privileges while logged on as regular user.

Daniel Simard — Wed, 16 Apr 2003 11:34:08 GMT

Do you have to install the "SUDO" program on the unix system ? Cause I'm looking on my hp-ux 11i server and I can't find anything on sudo

man sudo
man sudoers
find / -name "sudo*"
vi /etc/sudoers
man -k sudo

???

Re: How to launch a program that requires root privileges while logged on as regular user.

Tom Danzig — Wed, 16 Apr 2003 11:36:19 GMT

While not the best solution securitywise, you could make the command SUID root via:

chmod 4755 /opt2/openv/netbackup/bin/jnbSA

Your choice. This is the easiest (if not the most secure) solution.

Re: How to launch a program that requires root privileges while logged on as regular user.

Donny Jekels — Wed, 16 Apr 2003 11:37:18 GMT

we use sudo 1.6.6

http://www.courtesan.com/sudo/

peace
Donny

Re: How to launch a program that requires root privileges while logged on as regular user.

Pete Randall — Wed, 16 Apr 2003 11:42:26 GMT

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.6/

In SD format.

Pete

Re: How to launch a program that requires root privileges while logged on as regular user.

Zafar A. Mohammed_1 — Wed, 16 Apr 2003 11:42:40 GMT

Yes, you have to install sudo and you can do from the above link. As Tom mentioned you can acheive without sudo also. I'll try first without sudo and then go for sudo.

Thanks
Zafar

Re: How to launch a program that requires root privileges while logged on as regular user.

Tim Sanko — Wed, 16 Apr 2003 11:57:55 GMT

This is an easy one.

The command sudo is usefull after installed. When faced with T3 broken up among 3000 people (slow....) I would set the suid bit. Some people have called this a sticky bit, but that is not accurate.

chmod 4755 ./myscript

When a user uses this script they have root id privilidge.

That is good for certain users. bad if more than a select group of users get to use the copmmand as root.

Solution protect these enhanced commands by tightening group permissions... We can't let users think we're
dispensable.

Re: How to launch a program that requires root privileges while logged on as regular user.

John Meissner — Wed, 16 Apr 2003 12:16:44 GMT

our company uses 2 products to do this type of thing. HP's ServiceControl Manager (SCM) is very good at this. It can be done via command line (which will let you put commands into scripts) or via GUI. SCM can be found at:
https://payment.ecommerce.hp.com/cgi-bin/swdepot_parser.cgi/cgi/try.pl?productNumber=B8339BA3.0&date=

another product we use is sudo. We're in the testing phase to see if we're going to keep this product though

Re: How to launch a program that requires root privileges while logged on as regular user.

Geoff Wild — Wed, 16 Apr 2003 12:30:37 GMT

You could also use "restricted SAM" and set the command up in that.

If you have OVO/ITO - then you can grant access to coomands to users through that as well...

Rgds...Geoff

Re: How to launch a program that requires root privileges while logged on as regular user.

vasundhara — Fri, 18 Apr 2003 04:21:20 GMT

Hi,

You can use remsh command for this.
remsh -l root -n ""

The hostname should be present in files /etc/hosts.equiv and $HOME/.rhosts

In general remsh is used to execute any command on remote host. But, you can use this for executing commands on the same host also.

For more information, you can refer man page of remsh.

Regards
VJ

Re: How to launch a program that requires root privileges while logged on as regular user.

Ramkumar Devanathan — Fri, 18 Apr 2003 08:08:05 GMT

Another good thing about using sudo is that all logs of operations run using sudo are maintained. you can configure to log into separate files and read thro tje log file to see any patterns of compromise/security fallouts.

- ramd.

Re: How to launch a program that requires root privileges while logged on as regular user.

Donny Jekels — Thu, 24 Apr 2003 00:33:07 GMT

also, if you should look at sudoscriptd.

It runs on top of sudo. ported to run on HP-UX, and it uses script to collect everything the users does. In & Out

sudo does not have this functionality.

awesome.
http://egbok.com/sudoscript/

Re: How to launch a program that requires root privileges while logged on as regular user.

malay boy — Thu, 24 Apr 2003 01:31:05 GMT

Guru's,
I think we used setuid for this purpose.I read it somewhere but can;t remember.Anybody can shed some light.

regards
Mb