Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Feb 2004 15:38:01 -0500 (EST)
From:      Jerry McAllister <jerrymc@clunix.cl.msu.edu>
To:        zzerver@hotmail.com (ZZerver ZZserver)
Cc:        freebsd-questions@freebsd.org
Subject:   Re: root access to a custom .sh defined as shell;
Message-ID:  <200402122038.i1CKc1U18692@clunix.cl.msu.edu>
In-Reply-To: <BAY2-F67x4xVGGJQeCH0000e893@hotmail.com> from "ZZerver ZZserver" at Feb 12, 2004 08:29:24 PM

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> Am running a free server of shells in freeBSD 4.9, the amount of
> >people solicitading new accounts has been too much that i can not
> >handle them by me, so i wrote this .sh program to do it for me, my
> >code its secure as much i can tell, i understand the risk involve and
> >decide to do it anyways, soo i create a new group call 'shellauto',
> >add new user 'newuser' promote to 'wheel', then i modify etc/shells to
> >accept my new shell, so when some body logs to my server as 'newuser'
> >the server run my .sh (freeshell.sh), everything works goodl but my
> >question is ...how can i give my script root previlages ? so can
> >addusers without me? also if there is a way to type a command directly
> >to shell (bash) so i can define quotas of 1mb, and background procees
> >to 3?? that way i can include those commands to my freeshell.sh
> >...thanks

You are not supposed to be able to make a shell script have SUID root
ability.    So, you either need to write a wrapper in C that calls
it or just rewrite the whole thing in C.

////jerry



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200402122038.i1CKc1U18692>