General :: What Is Suid Or Nosuid And Would It Override Nfs Server
Apr 26, 2010what is suid or nosuid and would it override nfs server? I really don't know what this all means. whats the difference?
View 1 Replieswhat is suid or nosuid and would it override nfs server? I really don't know what this all means. whats the difference?
View 1 RepliesI have these file systems mounted without the nosuid options set.
debugfs on /sys/kernel/debug type debugfs (rw)
/dev/mapper/KusuVolGroup00-DEPOT on /depot type ext3 (rw)
/dev/mapper/KusuVolGroup00-HOME on /home type ext3 (rw)
/dev/mapper/KusuVolGroup00-VAR on /var type ext3 (rw)
/dev/sdb1 on /home1 type ext3 (rw)
Do I set the option in the fstab files or set the files directly.
I have tried to configure an Enemy Territory Server in an way that a common user could run it just executing a command line. The first thing I did was writing a script like that
/usr/local/games/enemy-territory/etded +set dedicated 1 +set net_port 27960 +set fs_game etpub +set fs_homepath /usr/local/games/enemy-territory/27960 +set sv_punkbuster 1 +set +exec server.cfg +set +exec punkbuster.cfg +set +exec bots.cfg
and then putting it in the /usr/local/bin directory. Ok, the things seem to be fine, but then I realized that the program tries to write some config and log files. I noticed that because some warnings appear in the command line, like that Couldn't write etconfig.cfg always that I run the command as a normal user. On the other hand, if I give writing permission to these files, all the warnings disapear.
But I don't think it is a good way, because someone could change these files by hand, what would not be good.
My last try was to set the suid of the script up, with the command chmod u+s /usr/local/bin/etded-server
But as I already knew that suid does not work well with shell script I wrote a C source like that:
[Code]...
i was wondering if it is possible to run a program such as firefox or any other internet program as its own user (ie user firefox), but still in my desktop session, this way the program would have its own home folder and store all the data there, while i use it normally, i was trying to set the suid on the firefox binaries but then it doesn't starts at all.
View 6 Replies View RelatedI need to override envelope sender address from UserID@Servername.Domain to UserID@domain when sending mails from my Linux server.
1. currently if send a mail, it arrives as myuserid@linuxserver.domain.com instead of myuserid@domain.com.
2. Also, the mail is not being sent to other domains outside our comp network.
Up front: the per browser (or per process, if you will) part is the important part here. I'm well aware of the /etc/hosts(and its Windows counterpart), but would like to avoid this system-global method.
What tools exist to override the IP for a given (i.e. configurable) name per browser? For Firefox there are "Modify Headers" and "Tamper Data". Both of them do not appear to be suitable for my case, because the DNS lookup is done before that. So I can only modify the HTTP headers (e.g. the Host header), but not influence the IP to which it gets sent. But manipulating to what IP it gets sent is exactly what I want to do.
I'm trying to mount some file systems in the /sys directory with the nosuid option. Upon executing the command:
mount -o remount,nosuid /sys/kernel/security
or
remount nosuid /sys/kernel/security
/etc/mtab will show that they have been applied, but upon restart of the machine, the nosuid option is removed.
Soooo, the question is why are they being removed? Can /sys files carry the nosuid option?
I have just installed 9.10 netbook remix onto my Eeepc 901. I was previously using 9.4 Rather than clicking on shutdown icons, or going through shutdown menus, I added a keyboard shortcut to run a shell script containing the following code:
Code:
#!/bin/bash
init 0
because init needs to be run as root to have the correct permissions, I set the owner and group to be root , ran chmod 711, then chmod u+s to prevent anyone altering the script, and to allow anyone to execute it with root privelidges Since updateing to 9.10 netbook remix, I have been unable to get this to work. have applied the above changes but get a "/bin/bash: /usr/bin/shutdownscript: permission denied" error when I try to run my shutdown script from the terminal (nothing happens when I press the key combination asigned to the keyboard shortcut). If I run the shutdown script with sudo then it neatly shuts down. ls reveals the following permissions:-rws--s--x 1 root root
So it appears as if SUID and SGID are both set, and the owner/group are correct, and the script works, and yet it doesn't have the permissions to work. I installed 9.4 long ago enough that I can't remember if I had to do anything else to get it working, or has something changed between 9.4 and 9.10?
I've searched the forum, but nothing answers my question. We know the security risk posed by suid, sgid.I'm looking to remove the suid bits from all programs that do not absolutely need it.
This command:
find / -type f ( -perm -04000 -o -perm -02000 ) -exec ls -lg {} ;
gave the list below.
For which of these programs can I safely remove the suid bit? I don't want to break my system by modifying a program that the system needs.
-r-sr-xr-x 1 bin 502172 Jan 10 12:36 /usr/local/bin/dccproc
-r-sr-xr-x 1 bin 186683 Jan 10 12:36 /usr/local/bin/cdcc
-r-s--x--x 1 root 23980 Nov 17 00:27 /usr/lib/virtualbox/VBoxNetDHCP
-r-s--x--x 1 root 9896 Nov 17 00:27 /usr/lib/virtualbox/VBoxNetAdpCtl
-r-s--x--x 1 root 23976 Nov 17 00:27 /usr/lib/virtualbox/VBoxSDL
[Code]...
I say to remove access to MOST of these SUID binaries? do they all need this power? what i want to do is minimize access just incase one of them gets an exploit(as ive already done for apache SuEXEC)
[Code]...
I have looked at a LOT of forum posts and other sites trying to solve this problem but I have had no luck. I've seen the following:[URL].. I have an entry in my fstab that lets root mount a samba share on a Windows Server 2003 machine and gives users full read/write access to the share. The fstab entry looks like:
Code:
//servername.net/share /mnt/share cifs rw,user,umask=000,username=someuser,noauto,file_mode=0777,dir_mode=0777 0 0
However, when a normal user tries to mount the share they get one of two errors:
1. If I have /sbin/mount.cifs set to 777
Code:
mount error(1): Operation not permitted
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)
2. If I have /sbin/mount.cifs set to +s
Code: mount error: permission denied or not superuser and mount.cifs not installed SUID Does anyone have any suggestions as to how I would go about getting a user able to mount this samba share?
I set my user as no login my accident, I am assuming, and now after a re-boot I can't login to the desktop and do anything... is there a way to override this?
View 5 Replies View RelatedI am using FC15.I need a kernel with a different configuration - with the "Preemptible Kernel (Low-Latency Desktop)" option in the Processor Type and features menu. I need this to support my firewire audio device. I would like to build a new kernel RPM from the SRPM so that i can keep a clean system with RPMs for all files, and I don't really want to manually override the kernel bypassing RPM.I am following **exactly** the process described there - I install the SRPM, unpack the source, then use the starting sample config files in the BUILD folder to create a new customised .config file with the new option, then copy this back to the SOURCE folder.
This works perfectly if I make a standard kernel. But I cannot get the process to work if I change the config file. Every time I compile I end up with exactly the standard kernel -- a vanilla i686 kernel, without my custom config.I believe the problem is that when I run rpmbuild to compile the kernel, this process overwrites my config option. I found that there is a script (merge.pl) which creates new config files dyanmically for all kernel options based on fragments in the SOURCE folder. It looks like the script never uses the config file that I am putting into the SOURCE folder.The wiki page suggests using this command to copy my custom config file cp .config ~/rpmbuild/SOURCES/config-`uname -m`
I have an external css filewith...
Code:
#bg {
margin:0 auto;
[code]....
How would you make NIS user information override local user information on client systems? This is what I think is right? Add nis on the passwd registration file on the second line Is this correct?
View 1 Replies View RelatedI'm learning to configure tftp-server and using vi editor - google search not helpful at least what comes up first - maybe different in Fedora ?
[url]
Code:
But . . . vi editing etc/shadow I get . . . E45: 'readonly' option is set (add ! to override)
In INSERT MODE - do I add ! as !wq instead of :wq as I found in google search (that's NOT working) - - or - do I add ! on the line to set tftp server password to * -or - what?
Recently I encountered a problem with a triple-monitor setup where the EDID was rejected by the nvidia driver (version 195.36.0, claiming that the EDID checksum was invalid. The maximum resolution that the driver would allow was 640x480. Searching through the X logs (/var/log/Xorg.0.log), I found the following message:
Code:
(WW) Jul 26 21:37:57 NVIDIA(GPU-0): The EDID read for display device DFP-0 is invalid: the
(WW) Jul 26 21:37:57 NVIDIA(GPU-0): checksum for EDID version 1 extension is invalid.
[Code].....
I just upgraded to ubuntu 10.04 from 9.10, and one of the first things I did was to find a nice desktop theme. I tried several from gnome-look.org and eventually settled on one called "the days of grace"
Anyway, somewhere along the way, while trying out themes, I used a script provided by a theme author which installed the theme automatically, which had undesirable results. I don't remember the theme that did this, so I'll just call it theme x. The theme x script somehow made firefox use theme x instead of the default firefox "tango" theme, and now the tango theme is not available, because the theme x theme supersedes it.
The theme x does not show up in ubuntu's appearance preferences, but somehow it looks to be linked to the theme I chose, "the days of grace." I can switch to a default ubuntu theme (Ambiance, Radiance, etc.) and I have my firefox tango theme back.
Does anyone know how I can delete this theme x theme, and get back the tango firefox theme?
I am trying to install Lubuntu on a 2GB USB drive. The (L)ubuntu installer (ubiquity) disables the "forward" button since the minimum space required is 3.6gb, although the Lubuntu installation actually is <2gb.I read somewhere this was a handset value but I haven't been able to find out how to override this?
View 1 Replies View RelatedAfter some fudging around, I managed to get my 64-bit karmic install to output sound digitally to my amplifier. So far, so good. The amplifier indicates a sample rate of 44.1KHz, while it is capable of 48KHz (higher sample rate would be better, i assume). Also, more annoying, it indicates no signal when no applications are producing sounds, causing it to miss the first second of output when I unpause my music. Windows 7 outputs everything as 48KHz, apparently also outputting silence as the light doesn't blink when i pause a media player.
The question then being: How do I override the default sample rate of digital audio output (if this is even possible, googling suggested that this might be overridden by applications); How do I make my sound driver output silence when no application is outputting sound.
Additional info:
- Ubuntu Karmic x64 (dist-upgraded from jaunty)
- Exaile media player with Normal playback engine and Automatic audio sink
- Asus P5Q-E motherboard
- Philips DFA888 amplifier
Is suid disabled from running all home made bash scripts or just from running them as root or:
Who would know for sure.
I googled several combinations of Mandriva Linux how-to suid disabled setUID etc... so far all I found was "many distributions are disabling suid for security reasons" nothing specific.
I have all the gstreamers installed,including the ugly ones. I also have the Ubuntu restricted extras and keep getting, "cannot overwrite source files". What am I doing wrong?
View 5 Replies View RelatedI bought new laptop (VOSTRO 1015) with defalut ubuntu 8.1 linux OS. i need to instal latest ubuntu version, is it possible to override old version with new version if i can over ride old version is there any problems with my laptop.When i palyed MP3 and Videos in movie player one pop message was displayed codec are not available , ubuntu version is out dated.i need to instal latest ubuntu with audio and video drivers
View 2 Replies View Related1. I accidentally wrecked a previous Ubuntu installation so I decided to re-install via the Ubuntu disk. Unfortunately Ubuntu doesn't let me override previous Ubuntu installations...
2. Ubuntu Maverick Meerkat is due to released in about 3 weeks. I want to install it via a clean install.
3. So can anyone tell me how to remove both Ubuntu partitions safely. I am currently running WinVista with Ubuntu Lucid Lynx. I know I have to use something like this to erase GRUB2. Can anyone give me a good tutorial?
Scenario:A - Local Unix machineB - socks proxy server port 1080C - remote mysql server port 3306I want to connect to the remote mysql server(C) from local unix machine(A) using sock proxy(B).
View 1 Replies View RelatedI want to run rsync on server A to copy all files from Server B when they are newer than 7 days.(find . -mtime -7) I don't want to delete the files on Server B.
View 2 Replies View RelatedWhen I am trying to run the Xserver using the command startx I am getting the below mentioned error
xauth: creating new authority file /oracle/oracle10g/.serverauth.22555
Fatal server error:PAM authentication failed, cannot start X server. Perhaps you do not have console ownership?
[code]....
i have purchased sun server for my visualization project. Request you to help me finding the io for disk .I have put storage(disks) on different location (File Server) and on server (Application) i have configured 4 virtual machines.
How would i monitor the io for file server from the Application server where i have configured 4 virtual machine. one way to mount the file server share on application server and execute
dd if=/dev/zero of=/share/test.out bs=1024 count=1024 to check the read and write Is there any other way of doing this.
How to setup Dedicated Server for Web Hosting using Ubuntu Server or equivalent opensource Operating System? And how to make secured my Dedicated Server on public?
View 1 Replies View Relatedhow i have a machine installed Red Hat Enterprise Linux Server release 5.1 with 2 modem (usb & com port) still i want to configure RAS server so some pple able to connect my server and send me some files.
View 4 Replies View Related