RE: How do you...

[<wilton@daedilus.com>]

I don't know why, but that fails to work.  It just gives an error message
about not being able to execute the binary?!?!  I've tried different shells,
different flags and the binary is executable.  Has anyone managed this
successfully on 2.8?

-----Original Message-----
From: owner-tech@openbsd.org [mailto:owner-tech@openbsd.org]On Behalf Of
Vincent Bernat
Sent: Wednesday, January 03, 2001 12:01 PM
To: tech@openbsd.org
Subject: Re: How do you...


Le Wed Jan 03, 2001 at 11:40 -0800,
wilton@daedilus.com <wilton@daedilus.com> disait :

> I'm trying to run a server as another user so that it doesn't run as root.
> I don't want to offer a shell on the account for fear that a security bug
> may be found.
>
> I've read the man page for su and I've tried both -c and -m but neither
one
> will work.  I use 'su -m jabber jabberd/jabberd' and it tells me that it
> can't execute the binary file, but if I place the -m after jabber then it
> tells me it can't login and gives the nologin message.  According to the
man
> page I should just be able to 'su jabber -c jabberd/jabberd' but no luck.

If you place "-m" after the login, su launches /bin/nologin -m.
I use "su -m dnet /bin/sh /full/path/to/your/app"
--
BOFH excuse #353:
Second-sytem effect.