setuid query

2 Nov 2000

      I have a strange problem that occurs only on SuSE, but not on RedHat.

We have a java application that runs setuid.  In order for this to work, the
following scenario is followed :

script1    run by user, this then calls the jre and the first part of the
java application, which then calls prog1
prog1     has setuid and setgid - this then calls script 2 (usually as the
owner of this program)
script2    on all other systems, gets executed in setuid mode (ie as owner
of prog1)

On our SuSE system, script2 is not executed with setuid, we have managed to
drop out somehow.

Now, the id for the owner of the program is 500, group is 101, so this
should be above any "setuid limit".

I have exactly the same user/group id definitions on my RedHat box and do
NOT get this problem.

Any ideas ?

Maciej Chodzko-Zajko
MERANT
Answerline Product Manager

Email:        Maciej@Merant.com <mailto:Maciej@Merant.com> 

Int.PVCS.Answerline@Merant.com <mailto:Int.PVCS.Answerline@Merant.com> 
WWW:    http://www.merant.com <http://www.merant.com/> 

begin 600 Merant Internal.jpg
M_]C_X``02D9)1@`!`0$!+`$L``#_VP!#``,"`@,"`@,#`P,$`P,$!0@%!00$
M!0H'!P8(#`H,#`L*"PL-#A(0#0X1#@L+$!80$1,4%145#`\7&!84&!(4%13_
MVP!#`0,$!`4$!0D%!0D4#0L-%!04%!04%!04%!04%!04%!04%!04%!04%!04
M%!04%!04%!04%!04%!04%!04%!04%!3_P``1"`#Q`E<#`2(``A$!`Q$!_\0`
M'P```04!`0$!`0$```````````$"`P0%!@<("0H+_\0`M1```@$#`P($`P4%
M!`0```%]`0(#``01!1(A,4$&$U%A!R)Q%#*!D:$((T*QP152T?`D,V)R@@D*
M%A<8&1HE)B<H*2HT-38W.#DZ0T1%1D=(24I35%565UA96F-D969G:&EJ<W1U
M=G=X>7J#A(6&AXB)BI*3E)66EYB9FJ*CI*6FIZBIJK*SM+6VM[BYNL+#Q,7&
MQ\C)RM+3U-76U]C9VN'BX^3EYN?HZ>KQ\O/T]?;W^/GZ_\0`'P$``P$!`0$!
M`0$!`0````````$"`P0%!@<("0H+_\0`M1$``@$"!`0#!`<%!`0``0)W``$"
M`Q$$!2$Q!A)!40=A<1,B,H$(%$*1H;'!"2,S4O`58G+1"A8D-.$E\1<8&1HF
M)R@I*C4V-S@Y.D-$149'2$E*4U155E=865IC9&5F9VAI:G-T=79W>'EZ@H.$
MA8:'B(F*DI.4E9:7F)F:HJ.DI::GJ*FJLK.TM;:WN+FZPL/$Q<;'R,G*TM/4
MU=;7V-G:XN/DY>;GZ.GJ\O/T]?;W^/GZ_]H`#`,!``(1`Q$`/P#]4Z***`"B
MBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`***
M0G%`"T4W=1NH`=13&DV]:C:Z5:!I-D]%5OMJ4?;4H*Y)=BS14*W*M3P^>E!+
M36X^BF[J-U`AU%-W4;J`'44QI`O6H_M2T#LV3T5!]K6@72FE<?*^Q/13!(&Z
M4NZF2.HINZC-`#J***`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHH
MH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@
M`HHHH`****`"BBB@`HHHH`****`"DSBD)P::\@4<T#M<?D4PN!U-5WNUZ"J<
MD[%N#Q0;1I.6YI-,%[YJK+>E3@54,K'O0J-)S18VC24=R?[<WO2_;7/8TD-H
MV<D5;2W4#D4$R<(]"H;EW/0U(D/G#FK:P)Z4[8%'`Q2L9NHOLHI_81[4&Q`]
M*MD@=:AEN54$4`ISEL1^4L?0TR2Z,1P*KR3,QX/%1DDGGFFD="IWUD6?MS>]
M'VYO>H%B9^E68;4]Q3!J$1/MK^AIZ73MV-6%MU`Y%2+"@'2D8.<.Q$%,B4PV
MF?2K)`45&TZJ<4K&:;Z$7V,>HH^R;?2K"L&&13L46#GD4G=H^F:C^V..QK0,
M:GJ*C,"9Z4)6+4X]44_MSCL:/MS>]3RVV1P*IM;,M,VCR2+\5SO')J7S!_>K
M'W,G&<4OFOZT"=&^QLJP/>ER*SX;H!>35F.X5SQ0<\H-%BBF[LTHY%!F+111
M0`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`
M!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!32>*":AFE"J
M0.M`TKB3S>6.M4I+HMD4R64NQ':HJ:1W0II+4***DBC+L/2F;-V'0P>8>:OP
MVP04Z*(*H..:F`Q4G#.HV]``P.E&12U&QP,T&`_(II.!4/V@9IDMP"#0:*#N
M-N+C`ZU1=RYR:'<L3FFTT=T(**"IX8/,ZTV"/>U:4,03M0V14GRZ(;%;!0*G
M`YI0,4M(X6V]Q,4M%%`AK<U0NQM-:!&:J7:B@UINTB&"Z(.VKR.&`YK&/#<5
M9MIRIY-%C>I3OJC3SFC%,1]PR*?0<>P8ICIN!R*DHH#8SY[0#FJ3`J<&MIE!
M*[@]*#KIU.C*-/CD,9R*:1@TE5N=35R]#=%B*NJV0.:Q0Q4Y%7+6<DC)J
M=CEJ4^J-#.:6F(<\T^@Y`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`**
M**`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHH
MH`****`&GK6;=288BM%N]95U_K*#HHJ[(:***L[0J_:1Y451')K4M%&RI9C5
M=HEA0,4M)TI:1P!4;K\AJ2D;I0-&5/E"2*A+$]ZN7<6!TJC31Z$&FKA2CDTE
M.C&YQ3-"_:Q8P<5<Q44(`05-4GFS=V%%%%!`4444`)G%5+LBK351O7P30:TU
M>12;J:`<&DHJCT#0MI\@"KH(XK'@8JXK3B?<!4G%5A9W)J***#G"HI4W5+36
MZT#3L9$Z[7J*K%T/GJO31Z4=@I\;[&IE%.Q6YK6[;DJ<=*J6I^6K8Z5)YLU9
MBT444$!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`
M4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`QN]9ETGS9K5(
MJM/%N!-!K3ERLRZ*>Z%#S3*H]#<*TK.3Y:S:G@EVD"DS.I'F1K#I2U'')N45
M)2//:L%(1FEHH$03Q[EK,FC\MJV&ZU4N(<YXXI;'12G9V,ZI[=<G-1.I4D5+
M;M@XJF=<MC4C'R"GTR(Y04^D>:PHHHH$%%%-)ZT`-E;"YK-NWW&K5Q,-N*SB
MQ8Y-".NE'J)114T$>^J;L=+=E<C7((-:%JQ.*!;#;TYIT$10\U+.:<U)%E:6
MFK3J#D$SBF.P%.8X%4[J;'0TKEQCS,J7#9>HJ5CN.:2K1Z*5E8*55W'%%6;:
M$EN:&*3Y5<M6RX6K(Z4R-`HQ3^E2>=)W8M%%%!(4444`%%%%`!1110`4444`
M%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4
M444`%%%%`!1110`4444`%-9<C%.HH`J36N^J$D91L5LD9J&2%6!XYH.B%5K1
MF12@X-6I;4YX%0&%E[55SK4DR>WN2#BKL<H<=:R.0:DCG93R>*1E.ES:HUP>
M*=5**Z4#GFK"W"M2.1P:)*:RY4BE#YI3S01L4;BVXS51048<5L%`1@U`]N">
M*1TPJ:68^%LH*FJ"-"O6IMU,PEN+29%-,@'6HGN56@%%LE9@.]5Y[C;D9J":
MYR#@U59RW4T+4Z(4NK%DDWFF4H!)P*FCMF8T]CI;44,BC+M[5H06_EXI8H`H
MR1S4X&*6YR5*G-H@`I<"DW4UI0*#"UQ^132V.]0/=**JS7&>AH-(TW(L3W.`
M>:H22&0TA8MU-"H6Z"FE8[(P4!M+C-2I;,:MPVP[BBX2J*)!!;;B":OQQ;,4
MJ(!TIXXI''.;D%+1109!1110`4444`%%%%`!1110`4444`%%%%`!1110`444
M4`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110
M`4444`%%%%`!28I:*`&D<U&\(:IJ*!IM%)K$$]JA>SVUI$9I"F:#559(R6@(
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M53:.!3@.*6B@S$I:**`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHH
MH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@
M`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`*3%+10`F*,4M%`!1110`44
M44`%%%%`!28I:*`$Q1BEHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`
M"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`*
M***`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HH
MHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB
M@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`
M"BBB@`HHHH`****`(_,YZT]3D5GSR%)./6K<$H*"K<;*Y*=R:DR*#TJ&8D)Q
M4%I7)MP]:-P]:S&F9.II%N&8XS2-O9,U,BC.:K6[,>M6`<4S%JSL*2*C\SG&
M:1Y`N<U2$I:7&>*N,;D-V-!6S3ZBCY`J6H*"BBB@`I,B@]*BE.U:`)=P]:-P
M]:S)+A@>M,^TMZULJ39'.C6W#UHW#UK)^TMZT?:6]:?LF+G1K;AZT;AZUD_:
M6]:DBG9B!FDZ;0^=&G134.5%.K$L****`$SBC</6D;K5*YE96X.*J,>9V$W8
MO;AZT;AZUD_:6]:/M+>M:^R9'.C6W#UHW#UK)^TMZTJW)]:7LF'.C5R*6J4=
MR#U-6ED#=*S<6BT[CZ*0'-+4C"BBB@`HHHH`*3(H)Q5>>7;FFE=V%L6-P]:-
MP]:RFN6SUJ2&X)ZFM73:5R>9&CG-+3(SD4^L2PHHHH`****`"D)`I:JWCE!Q
MZ4TKNPF[%G</6C(K)%RV>M6[>?<>35N#1*DF7**0-FEK,L****`$W"C</6JM
MPY4\&J9N6SUK6--M7(<DC6W#UHSFJ$$S-U-7D.5J)1Y2D[CJ***D8FX4;AZU
M4N9"AX-5/M+#O6L8.1#DD:VX>M&X>M9/VEO6C[2WK5>R8N=&MN'K1N'K63]I
M;UH^TMZT>R8<Z-;</6C(K)%RV>M787+#FHE!Q*4KEG(HR*KRL0.*C,K#O4I7
M"Y<R**J1RLQY-%%K#N5KS[WXT6\Q!Q1>?>_&JX.#76E>)@W9FPC[A2LNX8JC
M:S]C5]/F7-<LH\K-XLH7,/-1PP_/6BT88\T+&JG(J#I56RL$<>RG2$`4%N*J
M7,XVX'6JBKLYF^K(KF;FH8.91498L>:?!_K176E9'/>[-6/H*EJ*/H*EKC9T
MA1112`0]*AF^Y4QZ5#-]RFMP,R7[U1U)+]ZFH,L!7<MCE8F*,5HPVZD"IOLR
M>E9.HD7R,R,5+;CYQ6E]F3TI1;HIX%2ZB:&H,>GW!3J0#`I:YS8****`&MUK
M/O/O5H-UK/O/O5K3^(SGL4Z7%)5RUB#CFNINRN9)7*F#Z4E:IMDQTJK/!C.!
M4*HF4X-%4'%6[:;&!53I3HV(854E=$Q=F;*'*]:=4$+905,.E<3T.D6BBBD`
M444AXH`1^!6?>/SBKDSX2LR9]S5M36MS.;T(J<APPIM%=1B:T#Y05..E4+:0
M<"KP;I7%)69T)Z#J***@H****`"J=_\`=_"KE4[_`.[^%:0^(F6QFT^*3RVS
M3**[#G-2WFW+5D'CK6/#(58#M6E'*"H]:Y)QLS>+N3T4@.:6LBRE<]:SSUK0
MN>M9YZUV4]CGEN6;;M6E']T5FVW:M*/[HK&IN:0V'4445B:%&[ZU0(.>E;31
M!NM,^S)Z5O&:BK&3C<R,4E:4L"@&L]QAB*VC)2,W&PVEQ3HUW-6A%;H4YHE)
M1&HW,T`YK2MNE2BV3'2GK&%Z5A.:DK&D8V&.N>U1O%D>E6-M&VLKEV*R1%31
M5G;11<+&9>?>_&JU6;S[WXU6KMCL<\MQ5."#6C;7&5`S6;4D+[&]J4H\R"+L
M;(P:1N*A@E#"G32!5S7)9WL=%R.>;8#S6=(VYB:?<2[SQ4-=4(\J,92N%20?
MZT5'4D'^M%6]B%N:L?05+44?05+7"SJ"BBBD`AZ5#-]RICTJ&;[E-;@9DOWJ
M2/[XI9?O4U#AA7:MCEZFK!T%3U3AN%&*F^U)ZUR-.YT)HFHJ'[4GK3EG5NE3
M9CNB2BD!R*6D,****`&MUK/O/O5H-UK/O/O5K3^(SGL4ZOV?W1]*H5=LVPM;
MSV,X;E\=*BFQM-/$@`YJM/.IKFC%MFS>A0?[YH3[PI&.6)IT8)85V;(Y^IIP
M?<6IQTJ&$805,.E<3W.E"T445(PI#TI:8[8!H`K7+_)BLZI[B3+$57KL@K(P
MF[L**G6+*9Q43+M-6G<BP^!L.!6I&<@<UD(<,*T;9\FL*JZFL&6Z*0'-+7.:
MA1110`53O_N_A5RJ=_\`=_"M(?$3+8S:**?&NYL5V'.,JQ;S8-0NA4T@.*EI
M20T[,V(GW#-2UG6L^!@]:O*^17)*-F;IW*MSUK//6M"YZUGGK733V,9;EFV[
M5I1_=%9MMVK2C^Z*QJ;FD-AU%%%8F@4444`5YONFLN3[YK4F^Z:RY/OFNFD8
MS'1?>K4B^Y67%]ZM2+[E*J.!*.E+2#I2USFH4444`%%%%`&5>?>_&JU6;S[W
MXU6KNCL<TMQP0D4VKMK&&3FJ\T15B>U)25[!;2XZ";R^].FN=ZXS5:BGRJ]P
MN]@IVPXS3HHR[<5<:("+WI.26@U&YGU)!_K13#U-/@_UHJGL2MS5CZ"I:BCZ
M"I:X6=04444@$/2H9ON5,>E0S?<IK<#,E^]4=22_>I@&37<MCE849J>.W+8J
M7[*?2DY)%<K*>:LVW44_[*?2I(X2IS42DFAJ+N7%^Z*6D7[HI:Y#<****`&M
MUK/O/O5H-UK/O/O5K3^(SGL4ZDCE*#%1TH4D<5UF),UR2*A))-)2CDBE9(+M
M@!FK=M!GFGPPJ5!JTD87I6$ZG1&L8]1Z#"]*=2`8I:YS4****`"J\[8!YJ9N
M*HWDF*N*NR6[(J2G+FF@9-!YI\6,\UV;(Y]V7H5S&.*JW2;35N.50O6JUVX;
MI7/&_,:RM8JU;LVYZU4J2%]IK>2NC.+LS83D4ZH8&^2I1S7$]SH%HHHI#"J=
M_P#=_"KE4[_[OX5I#XB9;&;5BT'SU7JS9_>_&NJ6Q@MR::#()Q5%AM)%;&W(
MJE<0>E8PGT9I*/4J*<$&K]O/NP,U0(P:=&^PUK*/,B(NQ=N#DU0/6K#2@U7H
M@K*P2=RS;=JTH_NBLVV[5I1_=%85-S2&PZBBBL30****`*\WW367)]\UJ3?=
M-9<GWS732,9CHOO5J1?<K+B^]6I%]RE5'`E'2EI!TI:YS4****`"BBB@#*O/
MO?C5:K-Y][\:K5W1V.:6YHV/W*?<)N'2F6'*599<US2=I&T=C(DC\LTBKN.*
MOS0;C38[?:V<5JJBL9\NH^UAV5)<?ZNI0H4<5%<?ZNL+WE<UM9&4>II\'^M%
M,/4T^#_6BNQ['.MS5CZ"I:BCZ"I:X6=04444@$/2H9ON5,>E0S?<IK<#,E^]
M21_?%++]ZFQ\.*[5L<O4U(`,"I\57@;IQ4^ZN.6YTH7%&*3=1NJ1CJ*0<TM`
M!1110`UNM9]Y]ZM!NM9]Y]ZM:?Q&<]BG5J!<H:JU>M!E?PK>;LC..Y5ECVDF
MF5?N(LKQ5!E*G!IQE=":L7+:?/%7AUK&1]C9K1MIMW6L:D>J-(RZ%NBD!R*6
ML#4***0]*`&2G"UF7+[FJ[<OA*S"2QR:Z*2ZF,V)12@%C@4\0.>U=!F-#$=S
M2$YI_D/Z4>0_I2N@LR.EI3&R]13:8&E;/\E6QTK*MI"&`K31L@5QS5F=$7=#
MZ***S*"J=_\`=_"KE4[_`.[^%:0^(F6QFU9L_O?C5:K-G][\:ZI;&$=S22DD
M3=2I3ZXNITF5<P[6S5:M>6,,IK-FB*$FNF$KJQA*-M2*BBBMC,M6W:M*/[HK
M-MNU:4?W17+4W-X;#J***Q-`HHHH`KS?=-9<GWS6I-]TUER??-=-(QF.B^]6
MI%]RLN+[U:D7W*54<"4=*6D'2EKG-0HHHH`****`,J\^]^-5JLWGWOQJM7='
M8YI;FEI_W:MU4T_[M7*Y)_$;QV$P/2C`]*6BH'80]*@N/]74YZ5!<?ZNJCN@
M>QE'J:?!_K13#U-/@_UHKM>QS+<U8^@J6HH^@J6N%G4%%%%(!#TJ&;[E3'I4
M,WW*:W`S)?O4P'!S3Y?O5'7<MCE992[V8J3[?5*BIY(CYF7?M]/CO-Y`K/J:
MW^^*EPC8:DS63E13J:GW!3JY#H"BBB@!K=:S[S[U:#=:S[S[U:T_B,Y[%.K]
MG]T?2J%7[/[H^E;SV,X;EMAD=*SKF/G-:8&:@FC!4USP=F;-71E5+#+L(IL@
MPYIE=>Z.?9FO"^4'-3`UG6KDXYJ^O:N.4>5G2G=#Z:QX-.J*7[IJ!E&YDR2,
MU4J2<Y>F5W15D<TG=D]LF7%:(C'''Z57MD&`:N#I7-4E=FT59#=OM2%>.E24
M5D64KB/Y3Q^E9]:\R?)67*N&KJINZ,9H2(X<5IP-D"LH=:O69)HJ*Z%!]"_1
M35IU<IN%4[_[OX5<JG?_`'?PK2'Q$RV,VK-G][\:K59L_O?C75+8PCN:24^F
M)3ZXF=(TCCI5>YBWCI^E6J:5S0G9B:N8LB;&Q3:OW,0ZU1(P:[(RYD<\E8LV
MW:M*/[HK-MNU:4?W16%3<UAL.HHHK$T"BBB@"O-]TUER??-:DWW367)]\UTT
MC&8Z+[U:D7W*RXOO5J1?<I51P)1TI:0=*6N<U"BBB@`HHHH`RKS[WXU6HHKN
MCL<TMS2T_P"[5RBBN2?Q&\=@HHHJ"A#TJ"X_U=%%5'=">QE'J:?!_K1117:]
MCF6YJQ]!4M%%<+.H****0"'I4,WW***:W`S)?O5'117<MCE84444Q!4UO]\4
M44GL-;FLGW!3J**X#J"BBB@!K=:S[S[U%%:T_B,Y[%.K]G]T?2BBMY[&<-R\
MO2HI?NFBBN6.YT&5+]\TRBBNU;'*]RW:=16@O:BBN6IN;PV'U%+]TT45FMRS
M*F^^:8.M%%=RV.5[FE;?=%6ATHHKCGN=$=A:***@HCF^X:RI^M%%=%(RF1CK
M5ZRHHK2>Q$=RZM.HHKC.@*IW_P!W\***TA\1,MC-JS9_>_&BBNJ6QA'<TDI]
M%%<3.D****0%2YZ5FM]XT45U4]C">Y9MNU:4?W1116=3<N&PZBBBL30****`
J*\WW367)]\T45TTC&8Z+[U:D7W***54<"4=*6BBN<U"BBB@`HHHH`__9
`
end

Maciej Chodzko-Zajko

tags

participants (1)