i was wondering if it is possible to run a program such as firefox or any other internet program as its own user (ie user firefox), but still in my desktop session, this way the program would have its own home folder and store all the data there, while i use it normally, i was trying to set the suid on the firefox binaries but then it doesn't starts at all.
View 6 RepliesI have looked at a LOT of forum posts and other sites trying to solve this problem but I have had no luck. I've seen the following:[URL].. I have an entry in my fstab that lets root mount a samba share on a Windows Server 2003 machine and gives users full read/write access to the share. The fstab entry looks like:
Code:
//servername.net/share /mnt/share cifs rw,user,umask=000,username=someuser,noauto,file_mode=0777,dir_mode=0777 0 0
However, when a normal user tries to mount the share they get one of two errors:
1. If I have /sbin/mount.cifs set to 777
Code:
mount error(1): Operation not permitted
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
2. If I have /sbin/mount.cifs set to +s
Code: mount error: permission denied or not superuser and mount.cifs not installed SUID Does anyone have any suggestions as to how I would go about getting a user able to mount this samba share?
I've looked everywhere but I can't find where to change the default box for incoming mail, or am I on the wrong track. It's a nuisance having to change folders and I can't configure wastebin to empty on exit.And I can't get kmail to import from evolution. Do I have to go to the evolution storage and do it manually, and if so, how do I do that?
View 1 Replies View RelatedI want to allow a user to reset people's faillog. When I go into the /etc/sudoers file and put this syntax in I still get an error stating : /var/log/faillog permission denied.
Here is what I put syntax:
%user ALL=/usr/bin/faillog,/var/log/faillog
Customer asked me to create a menu for linux he also asked me to do this: Open like a command like where a user can execute commands...so for this the users have sudo enabled. The code below works OK. But it has an issue when a command is executed but the command does not need sudo
Like for instance
Code:
cd /
sudo: cd: command not found
How can I allow a user to execute all commands when a command does not need sudo
Code:
echo -e "Press Control+C to finish"
#echo -e " "
while true;
do
read whichcmd?"Insert Command: "
sudo $whichcmd
done
Here is the message:Failed to execute child process "/usr/lib/firefox-3.5.4/firefox" (No such file or directory)Firefox is installed and is there.
View 10 Replies View RelatedIs possible (by root of course) to run a command from console, that will be executed on X-session owned by another user on the same linux box/machine ? Example: Can root open xclock for another local user logged into X11 ?
View 2 Replies View RelatedI am trying to write one script. Purpose of my script is that it will login to particular user and it will execute some set of commands.What I was trying....
#!/bin/bash
su - tom
ls -lrt
[code]...
I have a program(that is written by me) which need super user permission to execute it. But I need to let the normal users to execute it without using 'sudo ./executable' and just './executable'. how i can set the program to execute by the normal users without using 'sudo' or password prompting.
View 2 Replies View Relatedwhat is suid or nosuid and would it override nfs server? I really don't know what this all means. whats the difference?
View 1 Replies View RelatedI have a question that i want to make a normal user to execute the commands which the root user is able to execute, say if i have a user named siru and when i logged in using siru i cannot run commands like tracert,nmap@loccalhost and all but i can run when i have logged into root account so my question is how to make siru to run the command tracert,nmap@localhost.I have even edited the .bash_profile of siru's home directory from
# .bash_profile
# Get the aliases and functions
if [ -f ~/.bashrc ]; then
[code]...
I am running F11 and I want to mount an FTP, but when I try to connect to an ftp server using Places -> Connect to Server, or the bookmarks I made I get an error that says 'Failed to execute child process "/usr/lib/firefox-3.5/firefox" (No such file or directory)' and sometimes it mounts anyway, but most the time it doesn't, and it never connects to the folder I asked it to, I just have to open the mount and navigate to it. I figure this happened because Firefox upgraded to 3.5.1 and the folder is now /usr/lib/firefox-3.5.1/firefox, but I don't know how to update this so that it looks in the right location.
View 6 Replies View Relatedafter install the openSUSE 11.3 Milestone 7 64 Bit, i founda big problem, the webbrowser Firefox crashed allways,it can't not execute.
View 2 Replies View RelatedAfter to download the firefox-3.0.10.tar.bz2I have the next problem
Code:
firefox-3.0.10]$ ./firefox
./run-mozilla.sh: ./firefox-bin: /lib/ld-linux.so.2: bad ELF interpreter:
[code]....
I have installed firefox to a user directory (version 3.6.10) /cache/app/firefox.
I have installed java jre1.6.0_21 to /cache/app/java/jre1.6.0_21
I have symlinked /cache/app/java/jre1.6.0_21/plugin/i386/ns7/libjavaplugin_oji.so to /cache/app/firefox/plugins/libjavaplugin_oji.so
So, in theory, when I start firefox the plugin should be listed in about:config - wrong. I have lots of other plugins working just fine, but java is not listed anywhere.
I ran strace -F ./firefox >/tmp/output.txt 2>&1 (the -F is necessary as firefox plugins are now loaded in a forked process). Firefox clearly finds my plugin:
It clearly looks like the plugin is being found, opened, and the first 512 bytes read and possibly memory mapped. So why doesn't it appear in the list of plugins?
One clue could be that there's another older plugin lying in the default directories (and I can't change this, I don't have root, hence running firefox in user mode).
Though surely firefox is smart enough to pick the latest one and use that? Is there a way of turning debugging ON during firefox start-up so I can find a debug message that explains why the latest JRE 1.6 plugin is being passed over?
is there anyway i can execute an application Hidden from the user?i used to do WinExec(Path, SW_HIDE) under windows, and now i do fork() + execv() but i dunno where to specifiy any values
View 4 Replies View RelatedMy program attributes (it uses semanage to change range): I'd like to ordinary user (bartek) can execute my program. I executed as root:
chmod u+s se_chmod4
so now my user can change his range in permissive mode by my program. My politic: In enforcing mode i can see attributes but when i want to excute i get:
How should look like my TE file that user (bartek) could execute my program (forget at moment about "semanage")?
I have just installed 9.10 netbook remix onto my Eeepc 901. I was previously using 9.4 Rather than clicking on shutdown icons, or going through shutdown menus, I added a keyboard shortcut to run a shell script containing the following code:
Code:
#!/bin/bash
init 0
because init needs to be run as root to have the correct permissions, I set the owner and group to be root , ran chmod 711, then chmod u+s to prevent anyone altering the script, and to allow anyone to execute it with root privelidges Since updateing to 9.10 netbook remix, I have been unable to get this to work. have applied the above changes but get a "/bin/bash: /usr/bin/shutdownscript: permission denied" error when I try to run my shutdown script from the terminal (nothing happens when I press the key combination asigned to the keyboard shortcut). If I run the shutdown script with sudo then it neatly shuts down. ls reveals the following permissions:-rws--s--x 1 root root
So it appears as if SUID and SGID are both set, and the owner/group are correct, and the script works, and yet it doesn't have the permissions to work. I installed 9.4 long ago enough that I can't remember if I had to do anything else to get it working, or has something changed between 9.4 and 9.10?
I am using CentOS 5.4. I updated my firefox to 3.6.7.
After that when I login in facebook and click anything in facebook, my pc log out, even from root user.
cause & solution of this problem.
When I confine a user myuser to the type user_u (or staff_u) with the SELinux instruction semanage login -d -s user_u myuser, this user cannot execute OpenOffice.
The error is :type=SYSCALL msg=audit(1302501686.474:8504): arch=40000003 syscall=192 success=no exit=-13 a0=0 a1=11bc60 a2=5 a3=802 items=0 ppid=12819 pid=12832 auid=4294967295 uid=505 gid=504 euid=505 suid=505 fsuid=505 egid=504 sgid=504 fsgid=504 tty=pts2 ses=4294967295 comm="soffice.bin" exe="/opt/openoffice.org3/program/soffice.bin"
[code]....
I suppose the problem occurs because I installed the rpm from the OpenOffice repository, not the standard OpenOffice included in FC13. However I prefer to use the rpm version, because of some bugs in the FC13 OpenOffice version. How can I create a policy to allow the execution of libicuuc and other OpenOffice libraries by my confined user ?
I am using slackware 12.2 - 2gig ram - amd64 cpu - ati hd2400 graphics. I am trying to upgrade software in particular opera to 11.11. I am using a slackbuild script to create the package and this seems to work ok. The original opera package was installed in this way.however as soon as the new opera is installed either via upgradepkg or installpkg the user - whatever user - apart from root loses the ability to run any application including logging-in.
View 12 Replies View RelatedI've searched the forum, but nothing answers my question. We know the security risk posed by suid, sgid.I'm looking to remove the suid bits from all programs that do not absolutely need it.
This command:
find / -type f ( -perm -04000 -o -perm -02000 ) -exec ls -lg {} ;
gave the list below.
For which of these programs can I safely remove the suid bit? I don't want to break my system by modifying a program that the system needs.
-r-sr-xr-x 1 bin 502172 Jan 10 12:36 /usr/local/bin/dccproc
-r-sr-xr-x 1 bin 186683 Jan 10 12:36 /usr/local/bin/cdcc
-r-s--x--x 1 root 23980 Nov 17 00:27 /usr/lib/virtualbox/VBoxNetDHCP
-r-s--x--x 1 root 9896 Nov 17 00:27 /usr/lib/virtualbox/VBoxNetAdpCtl
-r-s--x--x 1 root 23976 Nov 17 00:27 /usr/lib/virtualbox/VBoxSDL
[Code]...
I say to remove access to MOST of these SUID binaries? do they all need this power? what i want to do is minimize access just incase one of them gets an exploit(as ive already done for apache SuEXEC)
[Code]...
I have a nagios server monitoring around a 1000 hosts in our office. To make things easier, i've integrated apache into Active Directory for the website authentication. This works perfectly, however the Nagios website uses alot of CGI scripts to display information I get the message below when trying to show CGI scripts with an AD user. Local users work fine. 403 Forbidden You don't have permission to access /nagios/cgi-bin/status.cgi on this server. I tried adding the AD users to the cgi.conf file within Nagios (which works for local accounts) but it doesn't seem to work even with this change.
View 4 Replies View RelatedI have tried to configure an Enemy Territory Server in an way that a common user could run it just executing a command line. The first thing I did was writing a script like that
/usr/local/games/enemy-territory/etded +set dedicated 1 +set net_port 27960 +set fs_game etpub +set fs_homepath /usr/local/games/enemy-territory/27960 +set sv_punkbuster 1 +set +exec server.cfg +set +exec punkbuster.cfg +set +exec bots.cfg
and then putting it in the /usr/local/bin directory. Ok, the things seem to be fine, but then I realized that the program tries to write some config and log files. I noticed that because some warnings appear in the command line, like that Couldn't write etconfig.cfg always that I run the command as a normal user. On the other hand, if I give writing permission to these files, all the warnings disapear.
But I don't think it is a good way, because someone could change these files by hand, what would not be good.
My last try was to set the suid of the script up, with the command chmod u+s /usr/local/bin/etded-server
But as I already knew that suid does not work well with shell script I wrote a C source like that:
[Code]...
I am trying to write a perl script which will give an interactive session to a user to execute command on the server. I have written a small script to do this :
Code: !/usr/bin/perl -w
use strict;
use Net::SSH::Perl;
my $host = '192.168.1.1';
my $username = 'user';
my $login_passwd = 'test123';
[Code]...
I am afraid to ask with so many things changing around in each new release.Where would one add a custom script to execute when logging and shutting down in into a user profile like /home/test or /root ?would this be rc.local?
View 2 Replies View RelatedIs suid disabled from running all home made bash scripts or just from running them as root or:
Who would know for sure.
I googled several combinations of Mandriva Linux how-to suid disabled setUID etc... so far all I found was "many distributions are disabling suid for security reasons" nothing specific.
i created a /tmp partition amd mounted it like this:" mount -o loop,noexec,nosuid,rw /usr/tmpDSK /tmp"
I know i can't execute things in /tmp now but is there a way to execute only one file and no more???
I've set up a second user for myself on my laptop.
My user on the laptop is 'tiger'
Let's call the second user 'jrdobbs'
I would like to log on to gmail/facebook/etc using the jrdobbs, but I don't want to switch users via X... I just want a second instance of firefox open, which stores all of its login information under /home/jrdobbs.
My naive attempt looked like this:
Code:
su -l -c "firefox" jrdobbs
Here was my thinking:
start firefox under 'su jrdobbs' ... firefox should store its files under the current user's $HOME/.mozilla
[Code].....