Hi All,
How to prevent root user from doing setuid().
In otherwords, if the root(any user) is trying to do setuid in a program it should fail.
root has access to run anything. Use sudoers and only allow the users to run specific commands and dont allow root access.
Because the information could be used to write a virus I will not respond directly.
On reflection the proposal is ludicrous and if implemented will cripple your system beyond repair.
Btw. It helps to know what version of HP-UX you have and whether the system has been built "Trusted".
To follow on - for example, the passwd command MUST be setuid or no ordinary user could run it.
More correctly what are you trying to do? ...not how you think it should be done
1 Like
Here is whjat i want to do
I am root user and doing a setuid inside my program to execute as a different user.
Is it possible to prevent this by some system setting.
I need to test the above mentioned scenario..
Reading between the lines here:
What computer programming language are you using?
Does your program not work and you want to know why?
I'm struggling to guess why a root user would need such a program.