topic Re: execute files without read permission in Operating System - HP-UX

execute files without read permission

Carme Torca — Wed, 24 Mar 2004 10:37:57 GMT

Hi,

Does anyone knows know I can put a file without read permission, but with execution permission.... I want this because I don't want the user see inside the file.

Is it possible?
Thanks!
Carmen.

Re: execute files without read permission

Robert-Jan Goossens — Wed, 24 Mar 2004 10:40:20 GMT

Hi Carmen,

# chmod 100 file

Robert-Jan

Re: execute files without read permission

Patrick Wallek — Wed, 24 Mar 2004 10:40:47 GMT

If you are talking about a shell script, it is not possible by just changing the permissions. A shell script MUST be readable to be executable.

Re: execute files without read permission

Sanjay_6 — Wed, 24 Mar 2004 10:41:44 GMT

Hi,

Yes it is possible. Set the permissions of the file accordingly.

Hope this helps.

Regds

Re: execute files without read permission

Carme Torca — Wed, 24 Mar 2004 10:42:33 GMT

It doesn't works fine...
I put
chmod 070 to /tmp/prova.txt
-----x--- 1 root oinstall 47 24 Mar 16:33 prova.txt

But If I do:

[:oracle]/tmp> ./prova.txt
ksh: ./prova.txt: cannot open

Re: execute files without read permission

Steven E. Protter — Wed, 24 Mar 2004 10:44:11 GMT

a file can have execute permissions(see above) without read permissions.

root can execute a script with no read permissions because in reality root can read ANYTHING.

Thats because its all powerful.

On a practical level, it might help to know what you are trying to accomplish.

SEP

Re: execute files without read permission

Mark Grant — Wed, 24 Mar 2004 10:44:33 GMT

You can't do this except for root. You need read permission to execute it. The only way around this that I can think of is to have a SETUID root wrapper program that calls the script.

Re: execute files without read permission

A. Clay Stephenson — Wed, 24 Mar 2004 10:46:44 GMT

The answer is both yes and no. If the file is a true executable (e.g. a compiled 'C' program) then all you need are the execute ('x') permissions but I suspect that you are talking about a script. A script is interpreted so the shell must be able to read the file before it can execute it. In fact, the execute bits on a shell script only have meaning to the shell itself rather than the OS.

There are some utilities which can compile your shell script into a true executable; the commercial versions work quite well.

Re: execute files without read permission

Robert-Jan Goossens — Wed, 24 Mar 2004 10:46:59 GMT

Hi,

Made a small script with ls -la permissions 100 --x------ rj

/tmp/r# more rj
ls -la
/tmp/r# ls -la
total 48
drwxr-xr-x 2 root sys 1024 Mar 24 16:39 .
drwxrwxrwx 8 bin bin 22528 Mar 24 16:44 ..
---x------ 1 root sys 7 Mar 24 16:44 rj
/tmp/r# ./rj
total 48
drwxr-xr-x 2 root sys 1024 Mar 24 16:39 .
drwxrwxrwx 8 bin bin 22528 Mar 24 16:44 ..
---x------ 1 root sys 7 Mar 24 16:44 rj

Regards
Robert-Jan

Re: execute files without read permission

Mark Grant — Wed, 24 Mar 2004 10:48:40 GMT

Robert-Jan,

But you are "root". As SEP said, root can read "unreadable" files. Try is as a non-root user.

Re: execute files without read permission

Robert-Jan Goossens — Wed, 24 Mar 2004 10:49:54 GMT

YUP you are right Mark, did not see your post, sorry Carmen.

Re: execute files without read permission

Carme Torca — Wed, 24 Mar 2004 10:52:26 GMT

Hi,
How does work SETUID root wrapper program??
Could you put me an example??

Thanks!
Carmen.

Re: execute files without read permission

Carme Torca — Wed, 24 Mar 2004 10:56:03 GMT

There are some utilities which can compile your shell script into a true executable; the commercial versions work quite well.....

Does you know the name of one utility of its??

Thanks!!
Carmen.

Re: execute files without read permission

Mark Grant — Wed, 24 Mar 2004 10:58:07 GMT

Simple one would be

main(){
system("}

save as mywrapper.c

Compile with cc -s -o mywrapper mywrapper.c

chown root mywrapper

chmod 6755 mywrapper

In my view, this is a worse security hazard than allowing people to read your script (particulary using system()) but it might be enough for your needs.

Re: execute files without read permission

RolandH — Wed, 24 Mar 2004 10:58:38 GMT

@ Robert

that is what Clay tried to explain.

root can read everything so no need for read rights. As normal user your script needs these rights to work:

-x-x------ 1 user group 7 Mar 24 16:44 rj

But I have another solution for you carmen. If you don't want that a user can look in a script, because of a password in the script you can use the script compiler shc from
http://big.asknet.de/ for me it works fine.
But when your script MUST run under root rights you should try sudo.

Roland

Re: execute files without read permission

Carme Torca — Fri, 26 Mar 2004 09:23:36 GMT

Hi,

I have prove the script compiler shc from
http://big.asknet.de/, but it shows me:

> shc -f prova.sh
shc Invalid script's first line: #/bin/ksh
shc: Error 0

so, I have prove to do:

int main()
{
system("prova.sh");
}
and it's works fins.
Thanks everybody!!!
Carmen.

Re: execute files without read permission

RAC_1 — Fri, 26 Mar 2004 09:33:20 GMT

The first line should be #!/usr/bin/sh

Anil

Re: execute files without read permission

RolandH — Fri, 26 Mar 2004 09:36:37 GMT

I have testet it with Korn-Shell, too (#!/usr/bin/ksh). It has worked. But do not know if it will work with more complex Korn-Shell-scripts.

Roland