Re: Allowing users to execute shell scripts without seeing password

>I think this is plaform dependent.
>
> On HP-UX i created a file under user "oracle" tmp.ksh
> > cat tmp.ksh
> #!/usr/bin/ksh
> date
>
> then ran
> chmod 7711 tmp.ksh
>
> > ls -l tmp.ksh
> -rws--s--x 1 oracle dba 20 Feb 17 16:51 tmp.ksh
>
> From another user I ran
> $ /opt/oracle/tmp.ksh
> Fri Feb 17 16:57:06 EST 2006
>
> Saving the file using "vi" resets the mode setuid bit.
>
> So it has to be set again
>
>
> This doesn't work in AIX

Thanks Joseph,
I think the setuid+sticky bit is definitely the solution :)

This is on Solaris 8:

root_at_xxx # ls -l tmp.ksh
--ws--s--t 1 root other 20 Feb 17 23:08 tmp.ksh root_at_xxx # su - oracle
$ ls -l tmp.ksh
--ws--s--t 1 root other 20 Feb 17 23:08 tmp.ksh $ ./tmp.ksh
Fri Feb 17 23:14:03 MET 2006

Regards,
Dimitre

--
http://www.freelists.org/webpage/oracle-l