Can non-root user execute /sbin/ioscan?

[Jun Zhang_4]

I set that file 4777, an ordinary user still cannot execute the command. Please help.

[Brian Bergstrand · Accepted solution]

You've just opened your system for a huge trojan.

If you must allow normal users (and I don't know why), then try 2555 perms and make sure the file is owned by root: chown root /sbin/ioscan.

You may also want to investigate using sudo as you can restrict which users can use it and you have an audit trail.

HTH.

[Brian Bergstrand]

Sorry, that should be 4555, not 2555. Just get rid of the write perms.

ioscan is owned by bin so change the owner to root as I suggested and your users will be able to run it.

HTH.

[Sundar_7]

Hi,

sure non-root user can execute ioscan.. u dont have to modify the permission.

just use the -k option

$ ioscan -fnk

Without -k option ioscan tries to refresh the kernel with the status of the devices. With -k opton it just queries the kernl memory and displays.

Sundar

[Mark Grant]

Actually I believe 4555 is more likely to work as this will set the setuid bit whereas 2555 will set the guid bit (6555 for both). I think Brian has a good point when he says that you shouldn't really do this and sudo is a much better option.

[Brian Bergstrand]

Sundara's option is better than anything else. I completly forgot about that. With -k you don't have to change anything.

[Steven E. Protter]

No.

You get an error accessing /dev/config

If you open up permissions there you might as well just wipe the whole box out.

This is a HUGE security problem. ioscan is an admin tool. Anyone that uses it should be trusted with the root password.

SEP