4 replies to this topic

[Neoburner]

Hi all

Having a little issue, I want to run a program in linux under a specific user, my issue is that as it is being run from a PHP file from the web using exec it will only run the program under the apache user (default user).

Is there a way i can run it as the user I want (a local user)? As permissions on the file/location only allow me too..

Command i was using:

echo exec('/programhere');

I know its simple but it does work, a whoami does echo apache.

Tried sudo but that requires a password to be entered etc.

Any help would be great!

Cheers

Neo

[Orjan]

of course sudo needs a password, how easy wouldn't it be to hack a server otherwise, just run a php command and the server is yours?

[Neoburner]

Thanks for that helpful post. Anyone fancy trying a guess at an answer? Not trying to show me up with information i already know!

[Alexander]

If the executable is something you must run, then it should be owned by the user whom is not Apache, and should have the setuid bit enabled under its permissions.

As root, or the current user whom owns it:

chmod u+s [I]programhere[/I]

An octal representation can be used as well, such as 4555 (4 being setuid, 555 being permissions)

This should allow Apache to run programhere as the user whom owns it, and thus allow access to the other user's files under the program - according to what you have stated is required.

More context could be helpful.

[Neoburner]

Thanks Alex

What I managed too do is add the program to the group and force a sudo with nobody and works great, creates a screen session (as more than one program being run) and places the program inside it.

Just edited the sudoers file with a bit of tweaking, once i'm fully happy its safe ill post my findings :)

Neo