Fedora Security :: Execute Program By Ordinary User?
Feb 27, 2011
My program attributes (it uses semanage to change range): I'd like to ordinary user (bartek) can execute my program. I executed as root:
chmod u+s se_chmod4
so now my user can change his range in permissive mode by my program. My politic: In enforcing mode i can see attributes but when i want to excute i get:
How should look like my TE file that user (bartek) could execute my program (forget at moment about "semanage")?
When I confine a user myuser to the type user_u (or staff_u) with the SELinux instruction semanage login -d -s user_u myuser, this user cannot execute OpenOffice.
I suppose the problem occurs because I installed the rpm from the OpenOffice repository, not the standard OpenOffice included in FC13. However I prefer to use the rpm version, because of some bugs in the FC13 OpenOffice version. How can I create a policy to allow the execution of libicuuc and other OpenOffice libraries by my confined user ?
I've looked everywhere but I can't find where to change the default box for incoming mail, or am I on the wrong track. It's a nuisance having to change folders and I can't configure wastebin to empty on exit.And I can't get kmail to import from evolution. Do I have to go to the evolution storage and do it manually, and if so, how do I do that?
Have got slow bumpy - slow to load -slow to refresh graphics. Also noticed that when inittab 3 and doing a non graphical login for user startx wont work. Something about fbdev not loading.
logining in via kdm works for user. have tried placing an xorg.conf into /etc/X11 with what used to be ok for user to have dri.am using an radeon hd 2400 pcie graphic card. Also placed a file into /etc/X11/xorg.conf.d/100-dri.conf again with what used to work to get dri working. Is it me or is slackware graphics gone down hill since 13.0?
Virtual Box doesn't work under ordinary user, though this user is in vboxusers group. Under SU it work normally. This happied after upgrage to 4.0.10-8.1 version from obs://build.opensuse.org/Virtualization community repository. In Oss repository there is 4.0.4 version.
Here the massage, that appears after start of Virtual Box under ordinary user: "Failed to create the VirtualBox COM object.
The application will now terminate. Ditails: Callee RC: NS_ERROR_FACTORY_NOT_REGISTERED (0x80040154)
I'm using ubuntu,i have a bin file under my /usr/bin, if i run the command under root user i'm getting no problem an it works fine,if i try it in with differnent user im getting
Code: semctl:premission denied
so how can i edit my bin file and change it to right permission
Is there a way to allow ordinary users to mount / unmount an ntfs partition?I don't want it to be mounted automatically - I can do that. I want it to be mount / unmountable by ordinary users (possibly in a particular group).
Im trying to install a program with bitrock installer but im asked to logon as root or become super user. When trying to logon as root from logon window I get message that "cant authenticate user" Ive tried to find a place in "users and groups" to become superuser but cant find it.
I'm building a Cluster with 20 small Compaq ipaq PC's as the nodes. I have absolutely no room for any keyboards on this cluster. The PC's require a keyboard to boot, and there are no BIOS settings I can adjust to fix this problem, and no BIOS updates. I have found a small DOS .com program by Compaq called NO_F1.com it's designed to allow the computer to continue to boot without a keyboard. it's only 172 bytes in size. It sets a bit in the CMOS which allows the boot process to continue without a keyboard. It does not permanently set anything, so it needs to run each time the computer starts.
Is there any way I can execute this program very early in the boot process every time the node boots ? I thought about dissembling the program and trying to modify the boot loader, or some other ASM program, the program is only 172 bytes. But thats really over my head. What could I try, I don't know what to do. Also, I have no floppy drive and no CD drive to boot from, only USB or hard drive.
I have a question that i want to make a normal user to execute the commands which the root user is able to execute, say if i have a user named siru and when i logged in using siru i cannot run commands like tracert,nmap@loccalhost and all but i can run when i have logged into root account so my question is how to make siru to run the command tracert,nmap@localhost.I have even edited the .bash_profile of siru's home directory from
# .bash_profile # Get the aliases and functions if [ -f ~/.bashrc ]; then
I have a file with two fields of numbers that I want to use as input for another program.
Code:
The above code does not work, as I think it would take the whole first and second fields as the input for one particular instance of the program 'inputbashangle'. What I want is to get the first two numbers from the first line of the file 'outfailtest', execute 'inputbashangle' with them, then move on to the first two numbers of the second line for all the lines of 'outfailtest'.
I was wondering if it was possible to execute a program from RAM, like having the file data in a bash script variable and then running it. Something like this: ls=`cat ls` $ls So is it possible to run a program without touching the hard disk and without creating tmpfs or ramfs (it would need to be standard user privileges).
Assume two applications, Application A and Application B. Both are written in C language.I had tried to use system() function in Application A to execute Application B. It success, but Application A cannot continue its own tasks before Application B exit. I want Application A to execute Application B, but Application A can continue its tasks without waiting for Application B to exit.
I'm trying to execute a C++ program on PowerPC. But I am facing an error saying: "error while loading shared libraries: libstdc++.so.6: cannot open shared object file: No such file or directory". But a C program gets executed successfully. The programs are cross compiled using PowerPC cross compiler.
I'm new to fedora and I'm looking for a program that blocks ips from iplists is there anyone like that for fedora 15? and if it's not in yum how do i install it?
I am currently trying to set up a media PC running Ubuntu in my living room..I plan to be using XMBC to play my music and videos using a Xbox 360 joypad. I have managed to get 'qjoypad' working so on the desktop the controller controls the mouse, I have also made a little script so that when XMBC opens, 'qjoypad' changes its key mappings to a different profile. However when I exit XMBC, I would like it to return to the default profile, is there any way of doing this?
I would like that my java program continues executing when I close the ssh connection, how can I do that? I suppose I have to create a service, but I have no idea how to do it!
I am using RHEL, and trying to execute a c program.I'm able to compile properly and execute until i reach a function getHandle, where the program gives a segmentation fault. Segmentation fault occurs in getHandle().
I would like to execute an already written C program that I am running on my embedded Linux, but from afar - through a HTML page. I am running an embedded Linux on my FPGA prototype board with a MicroBlaze soft processor. On this Linux i am running a httpd web server - I can serve html web pages to the outside through Ethernet connection. Now, I have a program written in C in this embedded Linux in /bin/gpio-test that does some stuff with my IO devices. Now I would like to control these IO devices through HTML web page - so I would like to be able to run this gpio-test program from a html web page and possibly send the program some parameters.
I want to execute a program at the very last step of Linux boot process. For Debian based Linux distro that uses BSD boot process, I came up with 2 solutions:
1) I should somehow call my program from the /etc/rc.local script (although is this the last step of the boot process?)
2) Use the "multi_end" and "sysinit_end" hooks for executing it at the end of rc.multi rc.sysinit respectively (I don't know how to do it though).