"su - other_user -c some_command" no password asked
This is a discussion on "su - other_user -c some_command" no password asked within the comp.unix.solaris forums, part of the Solaris Operating System category; --> On Mar 11, 2:11*pm, FJCS_Montecoruto <son_eu_cara...@yahoo.es> wrote: > [Thank you, and to all who responded]. > > On Mar ...
| |||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
03-17-2008, 06:03 AM
| ||||
| ||||
 Re: "su - other_user -c some_command" no password asked On Mar 11, 2:11*pm, FJCS_Montecoruto <son_eu_cara...@yahoo.es> wrote: > [Thank you, and to all who responded]. > > On Mar 11, 2:21 pm, Wolfgang <wtra...@AT.web.de> wrote: > .../... > > > maybe someone has suid root the su file and you have done a patch or > > update? *.../... > > This is a possibility. Right now i cannot tell. > But *i have tried an example script and changed the suid bit. Even > then, the passwod was asked for. > > If i'm not able to find the answer to the original question i will > take your suggestions about changing to "sudo" and eventually > modifythe script. > > Maybe this was originally scripted without any password for the other > user, (that's truly amazing but currently it seems to me the only > possible explanation on how this script was able to work), so later i > would have to put it right with "sudo", regardless of what the script > did originally. Or, the simple solution: The user running this "broken" script forgot the password and either conveniently forgot the password requirement or is lying to you.      |
|
03-17-2008, 06:03 AM
| ||||
| ||||
| Re: "su - other_user -c some_command" no password asked Fco. Javier Cobas schrieb: > [Thank you, and to all who responded]. > On Mar 11, 2:21 pm, Wolfgang <wtra...@AT.web.de> wrote: > .../... >> maybe someone has suid root the su file and you have done a patch or >> update? .../... > > This is a possibility. Right now i cannot tell. > But i have tried an example script and changed the suid bit. Even > then, the passwod was asked for. yes, I looked at sources at opensolaris (i assume su has not changed a lot since older SunOS versions): it calls getuid which returns the real uid and not the effective uid. was just a idea .... another idea: does su ask for the own password? Maybe give both users the same uid, and make shure getuid sees anotherusers id first ... ;-) |
Linear Mode
