[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Disabling SU



At 4/23/01 05:24 AM -0700, you wrote:
[shimi@www /bin]$ ls -l su
-rwsr-xr-x   1 root      root       13208 Apr 13  1999 su

so... as you can see, the "other" access is r-x, which means read+execute.

what you basically want is that only wheeled users could run this program,
right?

so I would do...

cd /bin
chgrp wheel su
chmod 750 su
chmod +s su

that would basically allow only to root and users in the wheel group to
run that program.

DANGER WILL ROBINSON! DANGER! One of the things that su does is to setuid root; hence it must have the setuid bit for the user created as well. You should do:

chmod 4750 /bin/su

instead of what you have above, to put the setuid bit back in place.


--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx