Terry Coles wrote:
> On Tuesday 23 Feb 2010, John Cooper wrote:
>   
>> On 23/02/10 14:47, [email protected] wrote:
>>     
>>> 1.  If I enter ./startloopstop, I get the small dialogue box which gives
>>> the user control over the running program.  When this is pressed a small
>>> file is written to the local directory, which is the signal, via
>>> checkforloopstop, to the running test program to exit the loop.  This
>>> works fine for me.  When the customer tries to do this, he gets
>>> 'Permission denied' when he types ./startloopstop.  What other things
>>> could prevent execution, bearing in mind the file and directory
>>> permissionsseem to allow anyone to do anything?
>>>       
>> Remember anyone can run the file but it doesn't mean the programme can
>> write to the directory, so this is most likely the problem. For
>> security, startloopstop should not have write access, so should be set
>> to either 755 or 555.
>>     
>
> That's the part I don't understand.  The directory listing shows 
> read/write/execute permissions to everyone, eg, users, group, world.  The 
> admin user can write to the directory, because he installed the software in 
> the first place.  He is in the mats group and so is the program binary 
> startloopstop, so why can't startloopstop write to the directory?
>
> It has been able to in the past, so what could have changed?

Unlikely but plausible - additional security software has since been 
installed or switched into deny mode that overrides standard Unix 
permissions. eTrust/SeOS [1] used to be the bane of our lives in this 
regard, but obviously we knew what we were dealing with and were 
prepared for it when it reared its ugly head.

However, if memory serves, the errors you are getting aren't consistent 
with that product, but it might be worth ensuring that you are not 
butting up against something similar before you proceed. The SA should 
hopefully be able to tell you about any updates, installs or switching 
from warning to deny that might have triggered this behaviour.

Sean

[1] 
http://sunsite.uakom.sk/sunworldonline/swol-07-1996/swol-07-security.html

-- 
And I've made disapointment
My very best friend

  [Anton Newcombe - Straight Up And Down]


-- 
Next meeting: Dorchester, Tue 2010-03-02 20:00
http://dorset.lug.org.uk/     http://www.linkedin.com/groups?gid=2645413
   Chat: http://www.mibbit.com/?server=irc.blitzed.org&channel=%23dorset
           List info: https://mailman.lug.org.uk/mailman/listinfo/dorset

Reply via email to