Re: preventing a user to start a process

From: Thomas Krause (freebsd-isp_at_chef-ingenieur.de)
Date: 07/26/05

  • Next message: Roman Volf: "Re: preventing a user to start a process" 
    Date: Tue, 26 Jul 2005 01:11:03 +0200
To: Eric Anderson <anderson@centtech.com>

    Eric Anderson schrieb:
    > Thomas Krause wrote:
    >
    >> Hello,
    >> is it possible to bar a user (www) from starting a process?
    >> I've a irc daemon running under the uid www. I think
    >> this was done by php. What would be the best way to prevent
    >> this (php should be remain usable)? I've installed ipfw rules,
    >> but this doesn't prevent the starting of the process.
    >
    >
    > Change the permissions on the file to not allow world execution?
    >
    > chmod 750 /path/to/irc-daemon

    the daemon was
    - downloaded
    - extracted
    - started

    by user www in dir /var/tmp, which has permission 1777

    Regards,
    Thomas.

    >
    > and make sure it isn't owner by www user, and the www user is not in the
    > group that owns the daemon.
    >
    > Eric
    >
    >
    >
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: Roman Volf: "Re: preventing a user to start a process"

    Relevant Pages

    • Re: Very basic security question:
      ... >> Though shalt not let network services alter any critical files is the ... >> What is normally done by myself and others I have talked to is a PHP ... You would write a daemon that your PHP code talks to ... saying "uhh, it looks OK" for hours on end). ...
      (Security-Basics)
    • Re: Need help about Linux daemon and system call (system or popen)
      ... > That's a long story but there's a PHP script I need to call in the ... > to make a small daemon in C on Linux. ... > to have the PHP process killed when I shutdown my daemon. ... > it doesnt kill the PHP process. ...
      (comp.unix.programmer)
    • Re: working as a daemon and executing tasks at a certain time
      ... i've written a daemon in php and everthing works fine. ... leads to running the function twice, ... just use variable say $lastRun to store when the event last ran and then you can check against that, within you if set $lastRun to the $current_time when it runs and never run if $lastRun $current_time aren't>= to the 1800 gap? ...
      (comp.lang.php)
    • Re: daemon checking permissions
      ... Why do you care about read or execute permissions? ... You should check the ownership of the file. ... daemon is in, set the permissions to 740, and it would pass your test. ...
      (comp.security.misc)
    • Re: tac_plus version F4.0.4.alpha on at least Solaris 8 sparc
      ... an example Tacacs+ daemon released ... > Any file defined with and accounting directive, ... is create with file permissions set at 666. ... > When it is created it is done so with file permissions set at 666. ...
      (Bugtraq)