topic execute as root? in Operating System - HP-UX

execute as root?

Joseph Hoh — Mon, 27 Nov 2000 14:06:43 GMT

How can I set a shell script to execute as root by another user. I don't want the user to be able to modify the script.

Re: execute as root?

Rita C Workman — Mon, 27 Nov 2000 14:13:03 GMT

Well, I generally have anything that needs root to run it....run by root. That way I don't have to worry about the other user at all. If a job needs to be run by Oracle than as root I include the scripts into my cron jobs and set up a small file to do the su to Oracle and run the oracle job. I do the same for other users.

What I'm saying is....as root I will run your jobs...but a user never runs root jobs. That way I know the jobs stay 'untouched'.

Just a thought,

Re: execute as root?

Dan Hetzel — Mon, 27 Nov 2000 14:17:59 GMT

Hi Jeff,

I agree with Rita, but I know it's sometimes unpractical.

An alternate solution would be to use 'SUDO' that you can freely download at the following address:
http://www.courtesan.com/sudo/sudo.html

This utility allows you do define 'who' may run 'what' and under which usedid. It's quite powerful.

Best regards,

Dan

Re: execute as root?

Rainer_1 — Mon, 27 Nov 2000 14:19:55 GMT

setting to effective (not real) user id can be done with sticky bit.

The first line of the script must contain ie:
#!/sbin/sh

Change owner of the script

chown root <script>

Set sticky bit

chmod 5755 <script>

Re: execute as root?

James R. Ferguson — Mon, 27 Nov 2000 14:23:04 GMT

Jeff:

You can do this by setting the set-uid bit. The script in question should be owned by root. Do 'chmod 45xx' on the script and when you run it from a non-root account, the effective uid will be that of root.

This is a VERY DANGEROUS practice. A better alternative is to use the 'sudo' utility or restricted SAM for functions you need to confer to trusted users.

...JRF...

Re: execute as root?

Alexander M. Ermes — Tue, 05 Dec 2000 07:40:54 GMT

Hi there.
Another hint. You should run this scripts under ksh, otherwise you could have weird results. I stepped into that trap last week
during an isnatll of 8.1.7
Rgds
Alexander M. Ermes