topic Re: sig_named and normal user in Operating System - HP-UX

sig_named and normal user

galu — Mon, 21 Aug 2006 07:32:10 GMT

Hi!
I want to allow common users mofify DNS entries and restart named with sig_named restart. I tried to write script with SUID but it didn't work. I get return: "kill: 4272: Permission denied". Is it possible do it and how?

G.

Re: sig_named and normal user

Jaime Bolanos Rojas. — Mon, 21 Aug 2006 07:37:23 GMT

Galu,

Maybe this page will help you out, please take a look at it:

"Aside: We assume that the production BIND configuration will be changed/managed by root. You may prefer to create a specific user for this task at this stage, e.g. 'dnsmgr' which belongs to the 'bind' group and has write access to /dns/etc/named.conf and /dns/var/named."

http://www.boran.com/security/sp/bind9_20010430.html

Regards,

Jaime.

Re: sig_named and normal user

Peter Nikitka — Mon, 21 Aug 2006 07:39:53 GMT

Hi,

1. I would not do that - tempering with DNS data by a normal user ...?? He/she should know what's going on!
2. Install and use sudo, you'll find it here (and at other places as well ...):

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

mfG Peter

Re: sig_named and normal user

James R. Ferguson — Mon, 21 Aug 2006 07:42:47 GMT

Hi:

You didn't specify the operating system version nor exactly how you implemented a 'suid' solution.

If you implemented this as only a shell script, then only the effective uid, not the real uid will reflect 'root'. Some tasks require the real id to be root for privilege. This can only be accomplished by calling 'setresuid(2)' in a C program.

Regards!

...JRF...