[sudo-users] Sudo and shared memory permissions

Chuck Mattern camattern at gmail.com
Thu Mar 26 14:15:24 EDT 2009


Greetings,

We're working on a migration from HP-UX to RHEL 4u7 and in the process from a home grown sudo type utility to sudo 1.6.8.  Some of the programs we are working with use shared memory for state information and message passing. One program (at least one that we know of so far )  in particular is challenging me as, after the sudo privelege escalation, it cannot attach to the desried shred memory segment.  I have run it through strace and found that. The exact same code the gets a successful shmat under the home grown utility (whether run under HP or RHEL) gets a permission denied under sudo. We have looked into some basic environmental differences based on the FAQ but found nothing to explain this other than possibly the fact that sudo does a more thorough job making the new process really run as user fred and group fred.  Since the owner of the segment in question is user barney, primary group users ( a hold over from the HP system) and the persimissions on the segment are 664 we set fred's primary group to users but to no avail.  Any thoughts or suggestions would be appreciated.


Regards,
Chuck
-- 
Sent from my Android phone with K-9. Please excuse my brevity.
-- 
Sent from my Android phone with K-9. Please excuse my brevity.


More information about the sudo-users mailing list