|
[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
[NMLUG] Debian Startup Script
Thanks for the pointers. I like the idea of setuid. Works just as described. In my case I'm trying to make sure this prog runs as a regular user instead of root. I plan on having it start at boot.....if I can just figure out how. <grin>
michael <mpchlets@infotechmegacorp.com> wrote:Let's not forget, that most daemons have a -u option or something like that
to set the user.
I also think that it is dangerous to run programs over the web with su or
even sudo as an option. Just think of the malicious code you can make it
run. But that is another discussion for another time.
michael
On Tue, 5 Oct 2004 22:12:36 -0600, Anthony Martinez wrote
> On Tue, Oct 05, 2004 at 07:40:13PM -0600, James Hamilton
> carved this out of pure phosphors:
> > There's several options, you can run it from cron as the user you could
also
> > use su to do that.
> >
> > su - jamesh -c /usr/local/bin/someprog
>
> Don't forget sudo - it's got a nifty NOPASSWD: option that I used to
> make a PHP script to edit iptables on the fly :)
>
> apache ALL= NOPASSWD: /sbin/iptables
>
> >
> > Or you could make the binary setuid like:
> >
> > chown username program
> > chmod 4700 program
> >
> > Now when root runs 'program' it should execute as 'username'.
> >
> > Setuid binaries should be used with caution (especially root suid's).
Anyone
> > that runs a suid binary runs it as the uid of the owner. So make sure
you've
> > got the write perms if you use one.
> >
> > On Tue, Oct 05, 2004 at 04:40:37PM -0700, Tim Emerick wrote:
> > > Thanks for the script. Couple of questions.
> > >
> > > How would I get a particular daemon to run as a particular user?
> > >
> > > How do I get programs to run at boot with debian? With redhat I could
just put the script in /etc/rc.local.
> > >
> > > Tim
> > >
> > > James Hamilton wrote:
> > >
> > > Here'a generic one that I use for such things. Just change the DAEMON,
NAME,
> > > DESC, and OPTIONS lines and it should fire right up.
> > >
> > > #! /bin/sh
> > >
> > > PATH=/sbin:/bin:/usr/sbin:/usr/bin
> > > DAEMON=/some/path/to/program
> > > NAME=PROGNAME
> > > DESC="Description of your program here"
> > >
> > > OPTIONS=""
> > >
> > > test -x $DAEMON || exit 0
> > >
> > > set -e
> > >
> > > case "$1" in
> > > start)
> > > echo -n "Starting $DESC: "
> > > start-stop-daemon --start --quiet --exec $DAEMON -- $OPTIONS
> > > echo "$NAME."
> > > ;;
> > > stop)
> > > echo -n "Stopping $DESC: "
> > > start-stop-daemon --stop --oknodo --quiet --exec $DAEMON
> > > echo "$NAME."
> > > ;;
> > > restart|force-reload)
> > > echo -n "Restarting $DESC: "
> > > start-stop-daemon --stop --oknodo --quiet --exec $DAEMON
> > > sleep 1
> > > start-stop-daemon --start --quiet --exec $DAEMON -- $OPTIONS
> > > echo "$NAME."
> > > ;;
> > > *)
> > > N=/etc/init.d/$NAME
> > > echo "Usage: $N {start|stop|restart|force-reload}" >&2
> > > exit 1
> > > ;;
> > > esac
> > >
> > > exit 0
> > >
> > >
> > > On Mon, Oct 04, 2004 at 11:33:57AM -0700, Tim Emerick wrote:
> > > > Hey all.
> > > >
> > > > I've been attempting to convert a startup script from Redhat to work
on my Debian machine but being a bit of a noob it's greek to me. Can someone
help me out. It's a script to startup BOINC as a daemon as the user boinc.
> > > >
> > > > The original Redhat script is here
(http://noether.vassar.edu/~myers/help/boinc/init.d-boinc). I compared it to
some standard debian scripts (atd, samba, etc) and I'm sure hacked it to
pieces. The original script worked once I commented out the redhat functions
line (line 20??). It was ugly and spewed error messages but it worked. Here's
what I have so far in my conversion process......it doesn't work. ...sigh...
> > > >
> > > > Thanks - Tim
> > > >
> > >
> > >
> > > --
> > >
> > > James Hamilton
> > > Southwest Cyberport
> > > http://www.swcp.com
> > > 505-232-7992
> > > _______________________________________________
> > > NMLUG mailing list
> > > NMLUG@nmlug.org
> > > http://www.nmlug.org/mailman/listinfo/nmlug
> > >
> > >
> > > ---------------------------------
> > > Do you Yahoo!?
> > > vote.yahoo.com - Register online to vote today!
> > > _______________________________________________
> > > NMLUG mailing list
> > > NMLUG@nmlug.org
> > > http://www.nmlug.org/mailman/listinfo/nmlug
> >
> >
> > --
> >
> > James Hamilton
> > Southwest Cyberport
> > http://www.swcp.com
> > 505-232-7992
> > _______________________________________________
> > NMLUG mailing list
> > NMLUG@nmlug.org
> > http://www.nmlug.org/mailman/listinfo/nmlug
>
> --
> panic("Oh boy, that early out of memory?");
> 2.2.16 /usr/src/linux/arch/mips/mm/init.c
> _______________________________________________
> NMLUG mailing list
> NMLUG@nmlug.org
> http://www.nmlug.org/mailman/listinfo/nmlug
_______________________________________________
NMLUG mailing list
NMLUG@nmlug.org
http://www.nmlug.org/mailman/listinfo/nmlug
---------------------------------
Do you Yahoo!?
Take Yahoo! Mail with you! Get it on your mobile phone.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.b9.com/pipermail/nmlug/attachments/20041006/a38edb3a/attachment.html
|
|
