1y ago

Run Shell Script without sudo and with special bit permission using suid-wrapper

blog.benyamin.xyz Run Shell Script without sudo and with special bit permission using suid-wrapper

We always remember chmod u+s or special permission bit on an executable means when we run the executable it will run as the owner of the executable (read this). There are a problem with it, it will…

A tricks on how to run a script as root without sudo, in case someone needs this. I use this for toggle on and off camera without pkexec. It's useful imho

7 comments

Bad idea

How to break user mode protections in 1 quick misstep!
Just like when an admin hands out sudo rights to run a custom script without locking down the script itself.

Oh, in the 90s I worked at a big defense contractor, one of a shell script had a suid on it, so just by creating a symbolic link named "-x" pointing to the script, and executing it, you entered in a root shell ☺️

Avoid using sudo and setuid by writing your own sudo program using setuid?

How to run a shell script with root permisions without sudo? su to root. Or set up the correct permissions for the script and whatever it needs to touch, and add your user to any required groups, so that you don't need to be root to run the script. Rolling your own solution is never a good idea for anything security-related.
- Or create a service running with limited access to specific resources, and create an API for users to make requests to that service.

Do you know how many times I've made some little bit of shell code "setuid" by writing a shitty little C program that just calls system()?

7 comments