redhat 3.0 AS -- allowing user to change ownership of a file

[Unix Administrator_5]

Redhat does not allow non-priveleged users the
ability to change ownership of a file, even if he owns it.

We have a need to have the ability to allow a user
to have this ability.

We have thought about having a wrapper script and then sudo it; however, I am concerned about the
options. Is there anyway to keep the options -- safe, i.e. not have someone enter a crazy option that might execute arbitrary code as root?

Any ideas would be appreciated

[Vitaly Karasik_1]

Well, you may just provide sudo for chown, but in this case user may create suided shell :-)

May I ask *why* you need this ability? - probably we'll be able to answer using other unix tools.

[Sergejs Svitnevs]

Only root should be able to change the ownership of the file.
Here goes a trick of gaining root access:
if you set the SUID-bit on a program, it runs as the owner.

As root:
1) Create temporary directory /tmp/ch_own:
mkdir /tmp/ch_own
2) Copy /bin/chown to the as "script":
cp /bin/chown /tmp/ch_own/script
3) Turn the SUID bit ON using:
chmod +s /tmp/ch_own/script

Login as non-priveleged user, then:
1) Create file demo.txt
2) Now change the ownership of demo.txt using:
/tmp/ch_own/script . demo.txt


Now any user can change the ownership of the file. But ... it is a serious security risk.

Regards,
Sergejs

[Unix Administrator_5]

We are currently trying to come up with a safer way.

In response to the suid chown issue, If i rembmer correctly hpux will not carry the suid bit when a file is copied.

But your points are well taken.