Options of setup someone to execute a script as my id.

UNIX for Advanced & Expert Users
1

Hi I would really appreciate your help:

First I knew there are a few ways to do it:

  1. Best is to set up sudoer...I'd like to see this as the last resort...there's a good reason for that ...

  2. use setuid command, but that command needs to be a binary executable, while my command is a shell script. Convert it to executable is hard because the box is an AIX 5.3 and I cannot convince management to by a C compiler which is required by the converting util which I download from internet. Plus it's hard to get it work as so far I haven't seen any one get it working on AIX5.3.

  3. I thought of some existing command(that can execute a shell script, live eval) that I may be able to use setuid trick ...but that doesnot work either cause they are kernal commands...

My situation is, I got a regular non-root AIX user id, and security is not much of a concern(from my side), I just want to make someone else can execute that shell script so they won't need to bug me for that everyday... Another reason is, I cannot let them run as their ids cause that script would generate files that other id cannot access.

Your valuable input is much appreciated..

TheGunMan.

2

I would first suggest setting up a group with all of the users you want to be able to execute the script. chgrp the script and log files to the name of the group, then chmod g+x the script, and chmod g+w the log files.

Or, you may want to look into AIX RBAC

3

Thanks Erice for your reply...But:

  1. I cannot make any user/group changes as it's tons of paper work and a complicated process... if the procedure is easy, I'd have gone the route of getting them setup as my id's sudoer to execute the script only.

  2. Even I did what you said, the log files gened by the script would still be under their name which is not what I want.

I'll still prefer a solution that would enable them to run the script under my id....

4

ksh93 comes with a shell compiler (shcomp). You could download ksh93 and give that a try if it isn't on your box yet.

5

...ksh93 is there but it doesnot recognize shcomp...

SUDO: /home/pzwl0>cd /usr/bin
SUDO: /usr/bin>ls ksh*
ksh ksh93
SUDO: /usr/bin>ksh93
SUDO: /usr/bin>shcomp
ksh93: shcomp: not found.
SUDO: /usr/bin>

6

Hi, you should be able to download the AIX version here, if it is not on your system:
INIT package
ast-ksh
Binary Package Installation Instructions

7

Thanks a ton Scrutinizer !!

I'll definitely try your links, although due to time constraint I browsed them a little bit for now and don't get what it is actually nor if it's something I need to or to do with AIX....

I'll spend more time on the links and may bug you later...

Regards,
thegunman

---------- Post updated at 09:45 AM ---------- Previous update was at 09:45 AM ----------

Thanks a ton Scrutinizer !!

I'll definitely try your links, although due to time constraint I browsed them a little bit for now and don't get what it is actually nor if it's something I need to or to do with AIX....

I'll spend more time on the links and may bug you later...

Regards,

thegunman