[ale] Allow non-root user to chown file to other user?

James P. Kinney III jkinney at localnetsolutions.com
Fri Nov 16 08:11:07 EST 2007


On Thu, 2007-11-15 at 14:44 -0500, Jeff Lightner wrote:

> Again I am asking if there is a way to allow non-root users to simply
> use the "real" chown command directly.  It just doesn't seem to me that
> this shouldn't be something that is configurable somehow especially
> given that it is configurable on at least two UNIX variants I'm familiar
> with.     
> 
The short answer is no. The prior posts discuss why. chown is a
dangerous tool in the wrong hands. 

Furthermore, a user can't chown a file to themselves. Again, it violates
the security of the system. 

All ways I've seen to workaround this are cludges that involve sudo
and/or setuid root scripts.

email is a great workaround!

-- 
James P. Kinney III          
CEO & Director of Engineering 
Local Net Solutions,LLC        
770-493-8244                    
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part




More information about the Ale mailing list