linux-lvm.redhat.com archive mirror
 help / color / mirror / Atom feed
From: Christoph Pleger <christoph.pleger@cs.uni-dortmund.de>
To: matthew patton <pattonme@yahoo.com>,
	LVM general discussion and development <linux-lvm@redhat.com>
Subject: Re: [linux-lvm] lvcreate from a setuid-root binary
Date: Mon, 19 Nov 2018 16:03:53 +0100	[thread overview]
Message-ID: <19d30fdf4dfd3ef69c6018108407e4ea@cs.uni-dortmund.de> (raw)
In-Reply-To: <1044845531.2858991.1542636286779@mail.yahoo.com>

Hello,

On 2018-11-19 15:04, matthew patton wrote:
>> program calls getpwuid() with the real user id of the calling user
> 
> maybe I missed a critical post explaining why it has to be, but that's
> a job for a trivial sudo specification line.
> 
> I can't think of any reason why sudo is not the answer to your
> problem, or frankly isn't always the answer.

I have already tried sudo before writing my own setuid-root-program, by 
calling it directly from pam_exec and by letting pam_exec call another 
program first that calls sudo. Either case failed, even with simple 
tests like letting sudo run /bin/ls (and of course I checked before that 
the same user could use sudo from the command line).

Regards
   Christoph

  reply	other threads:[~2018-11-19 15:03 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <1044845531.2858991.1542636286779.ref@mail.yahoo.com>
2018-11-19 14:04 ` [linux-lvm] lvcreate from a setuid-root binary matthew patton
2018-11-19 15:03   ` Christoph Pleger [this message]
     [not found] <1657965510.4711397.1542904883060.ref@mail.yahoo.com>
2018-11-22 16:41 ` matthew patton
     [not found] <1479542688.2901829.1542643514135.ref@mail.yahoo.com>
2018-11-19 16:05 ` matthew patton
2018-11-15 16:39 Christoph Pleger
2018-11-15 17:57 ` Alasdair G Kergon
2018-11-16 13:43   ` Christoph Pleger
2018-11-16 15:32     ` Zdenek Kabelac
2018-11-16 16:12       ` Christoph Pleger
2018-11-16 17:21         ` Roger Heflin
2018-11-16 15:41     ` Stuart D. Gathman
2018-11-21  9:56       ` Christoph Pleger
2018-11-21  9:58         ` Vladislav Bogdanov
2018-11-21 10:23           ` Christoph Pleger
2018-11-17  0:24     ` Alasdair G Kergon
2018-11-19  8:55       ` Christoph Pleger
2018-11-19 13:01         ` Alasdair G Kergon
2018-11-19 13:19     ` Bryn M. Reeves
2018-11-19 15:17       ` Christoph Pleger
2018-11-19 15:35 ` Christoph Pleger

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=19d30fdf4dfd3ef69c6018108407e4ea@cs.uni-dortmund.de \
    --to=christoph.pleger@cs.uni-dortmund.de \
    --cc=linux-lvm@redhat.com \
    --cc=pattonme@yahoo.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).