Re: Running root commands by http
Do u know webmin?
http://webadmin.sourceforge.net/webmin/
Eric
On Thu, 23 Aug 2001, Jean Baptiste Lallement wrote:
> Hi,
>
> U could use sudo ?
>
> Excerpt from http://www.courtesan.com/sudo/
> ---
> Sudo (superuser do) allows a system administrator to give certain
> users (or groups of users) the ability to run some (or all) commands
> as root or another user while logging the commands and arguments.
> ---
>
> and run it with a cgi or php or whatever.
>
> Hth
>
> On Thu, Aug 23, 2001 at 02:58:23PM +0200, Emmanuel Lacour wrote:
> >
> > Hi,
> >
> >
> > I wan't to get some opinions on doing this:
> >
> > Making someone to be able to create unix users by an http method (from an http browser).
> > Making someone to be able to restart a daemon under the identity of root from http.
> >
> >
> > I think about some methods:
> >
> > Running a cgi or system() under php
> > +
> > -use "super" to run the program
> > -making the programs needed setuid root (baaaahh)
> > -Sending a mail to the root containing specials header. A cron will inspect the root mailbox and execute commands as root, or a procmailrc?
> > -Another idea more secure??
> >
> >
> > Thanks.
> >
> >
> > Manu.
> >
> >
> >
> > --
> > Easter-eggs Spécialiste GNU/Linux
> > 44-46 rue de l'Ouest - 75014 Paris - France - Métro Gaité
> > Phone: +33 (0) 1 43 35 00 37 - Fax: +33 (0) 1 41 35 00 76
> > mailto:elacour@easter-eggs.com - http://www.easter-eggs.com
>
>
>
> --
> ________________________________________
> |_ | Jean Baptiste Lallement
> / / ZENI Corporation http://zeni.fr
> |___| Tel: 0 803 003 111
>
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: