From owner-freebsd-questions Sat Mar 1 13:23:23 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id NAA29967 for questions-outgoing; Sat, 1 Mar 1997 13:23:23 -0800 (PST) Received: from narcissus.ml.org (root@brosenga.Pitzer.edu [134.173.120.201]) by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id NAA29962 for ; Sat, 1 Mar 1997 13:23:21 -0800 (PST) Received: from localhost (ben@localhost) by narcissus.ml.org (8.7.5/8.7.3) with SMTP id NAA25111; Sat, 1 Mar 1997 13:22:58 -0800 (PST) Date: Sat, 1 Mar 1997 13:22:58 -0800 (PST) From: Snob Art Genre To: Bob Badaracco cc: questions@freebsd.org Subject: Re: Security and operation of rcmd function... In-Reply-To: <3317C933.7C74@webspan.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk On Sat, 1 Mar 1997, Bob Badaracco wrote: > I'm hoping that a Unix RPC programming expert can shed some light > on using the rcmd() function call. The man page on this function > states that you must have super user priviledges in order to envoke > it as a client. Does the iruserok() function that controls client > validation at the server allow rcmd to be used by clients other than > the super user? If access to the rcmd() can be lowered so anobody > other than the SU can use it, how would I use iruserok() to do this? > > Basically, I need to use the rcmd() function to execute a program > on a remote server without requiring super user priviledges to do so. > Can this be done? Is there any reason you can't use rsh? I read that rcmd is deprecated. Can anyone confirm or deny this? Ben "You have your mind on computers, it seems."