On Tue, 6 Apr 2004, C Leonard wrote: > How to run DOS Graphics on console, not as root user?
> I've seen rumors that this is supposed to work > ----------- > # addgroup dos > # adduser me dos > # adduser buddy dos > > Then, make /usr/bin/dos setuid root and executeable only by group 'dos': > > # chown root.dos /usr/bin/dosemu > # chmod 450 /usr/bin/dosemu > > Now, only users in group 'dos' can run dosemu and it will run as root. > ----------- > > I tried this- but no luck. The problem is that /usr/bin/dosemu is a script, and scripts can't (and should not for security reasons) be run suid-root. > It runs the reduced graphics functional DOS. > Am I missing a step? Is this the right approach for addressing this problem? The program you need to apply this too is /usr/bin/dosemu.bin. You might also need to edit /etc/dosemu/dosemu.users. By default it gives you console graphics only but I think the Debian setup is a little more conservative. If you use dosemu-1.2.0 or higher then it's better (a little more secure) to use sudo (see README.txt, Security), since sudo has the same effect as suid-root for DOSEMU -- will switch back to normal user -- but more fine-grained access checking, and allows you to have one single non-privileged dosemu.bin executable. "dosemu -s" implies "sudo dosemu.bin" which detects sudo, drops privileges, and switches back to joeuser. sudo dosemu (if that's allowed) runs dosemu with full root rights. Bart - To unsubscribe from this list: send the line "unsubscribe linux-msdos" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
