Re: Super.tab syntax

1998-04-21 Thread C.L.Daugaard
On Mon, Apr 20, 1998 at 08:32:56AM -0400, Brandon Mitchell wrote:
 On Mon, 20 Apr 1998, C.L.Daugaard wrote:
 
  On Sun, Apr 19, 1998 at 09:29:33PM -0400, Brandon Mitchell wrote:
 
  I still get
  
  bash: /proc/sys/net/ipv4/ip_forward: Permission denied
 
 I don't use super, but it's interesting that bash is the one complaining
 and not super.  You could make this a script and have users call the
 script from super.  Just be careful because bash is over cautious about
 suid operation and will drop is privleges if the euid != ruid.
 
I've also tried setting it up as a script.  Still no luck.

Thanks.

Curt


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Super.tab syntax

1998-04-20 Thread Brandon Mitchell
On Sun, 19 Apr 1998, C.L.Daugaard wrote:

 Using super, I'd like to enable certain users to execute the following:
 
 echo 1  /proc/sys/net/ipv4/ip_forward
 
 I've given super privilege for this exact string in super.tab, and running
 super with the -d flag confirms it, but when the user tries the command he 
 gets
 
 [name of script invoking 'super (cmd)']: /proc/sys/net/ipv4/ip_forward: 
 Permission denied

Have you tried escaping the shell characters:
echo \1\ \ /proc/sys/net/ipv4/ip_forward

HTH,
Brandon

-
Brandon Mitchell [EMAIL PROTECTED]   We all know linux is great... it
PGP: finger -l [EMAIL PROTECTED]  does infinite loops in 5 seconds
Phone: (757) 221-4847  --Linus Torvalds


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Super.tab syntax

1998-04-20 Thread C.L.Daugaard
On Sun, Apr 19, 1998 at 09:29:33PM -0400, Brandon Mitchell wrote:
 
 Have you tried escaping the shell characters:
   echo \1\ \ /proc/sys/net/ipv4/ip_forward

Thanks, I hadn't.  Unfortunately bash still complains about permissions.  I
additionally tried setting real uid to root, but when I run

super echo 1  /proc/sys/net/ipv4/ip_forward

I still get

bash: /proc/sys/net/ipv4/ip_forward: Permission denied

Puzzling.

Thanks again.

Curt


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Super.tab syntax

1998-04-20 Thread Brandon Mitchell
On Mon, 20 Apr 1998, C.L.Daugaard wrote:

 On Sun, Apr 19, 1998 at 09:29:33PM -0400, Brandon Mitchell wrote:

 I still get
 
   bash: /proc/sys/net/ipv4/ip_forward: Permission denied

I don't use super, but it's interesting that bash is the one complaining
and not super.  You could make this a script and have users call the
script from super.  Just be careful because bash is over cautious about
suid operation and will drop is privleges if the euid != ruid.

Good luck,
Brandon

-
Brandon Mitchell [EMAIL PROTECTED]   We all know linux is great... it
PGP: finger -l [EMAIL PROTECTED]  does infinite loops in 5 seconds
Phone: (757) 221-4847  --Linus Torvalds


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]