Re: [foxboro] DM callup without root permissions

:)

Regards,
 
Alex Johnson
Invensys Systems, Inc.
10707 Haddington
Houston, TX 77043
713.722.2859 (voice)
713.722.2700 (operator)
713.932.0222 (fax)
ajohnson@xxxxxxxxxxx
For the latest information on ArchestrA, go to
http://www.invensys.com/Archestra.html.
 
-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On
Behalf Of Corey R Clingo
Sent: Friday, August 27, 2004 10:07 AM
To: foxboro@xxxxxxxxxxxxx
Subject: Re: [foxboro] DM callup without root permissions

I fought this off and on for months, for a shop PC that has configuration 
access, trying to stay the course in the interest of security.  Then I 
came across a Helpful Hint on this (I can't recall the number).  It was 
about 3 pages of mods you had to make to the system, which, as Alex 
stated, were likely to be overwritten during upgrades.  At that point I 
gave up.  I set up as much security on OpenSSH as I could and allowed the 
PC to log in as root.
It's probably easier to wait for Alex to fix it than try it yourself:-)

Corey Clingo
BASF Corp.






"Johnson, Alex (Foxboro)" <ajohnson@xxxxxxxxxxx>
Sent by: foxboro-bounce@xxxxxxxxxxxxx
08/27/2004 07:19 AM
Please respond to foxboro

              To:  foxboro 
              cc: 
         Subject:       Re: [foxboro] DM callup without root permissions






Only with a lot of work:

1) Setting the set-uid bit on executables and
2) Changing directory access permissions.

It can be done, but it is a pain. In addition, you'd want to script it
because each update will undo it.


This is on my list.

Regards,

Alex Johnson
Invensys Systems, Inc.
10707 Haddington
Houston, TX 77043
713.722.2859 (voice)
713.722.2700 (operator)
713.932.0222 (fax)
ajohnson@xxxxxxxxxxx
For the latest information on ArchestrA, go to
http://www.invensys.com/Archestra.html.





 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
 
 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             http://www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave

Other related posts: