Torsten Curdt wrote:
>
> Hi,there!
>
> I'm wondering if there is any possibility
> to let a filter run as a different user
> than lp.
> In my printcap I have
>
> if=/var/lib/lpdfilter/myfilter
>
> Now when a user calls "lpr file.txt"
> the filter is called under user
> id "lp". The filter tries to write
> to the user's home dir so the user
> id of the calling user or root
> is needed.
>
> Is there any way to do this?
Well, depending on what your filter is written in, the obvious answer
would be to modify it and run it SUID root. The modification would be
to change the effective UID to the user in question. (You would want
to make this really bulletproof, among other things NOT doing it in
a shell script.)
You might also want to set the process's group ID as well. You'd
want to do that first, while you're still root, I think. (There's
a good chance that you wouldn't need to do this, but I mention it
just in case.)
See the man pages for setuid(2) and setgid(2).
--
- Dave Lovelace
[EMAIL PROTECTED]
[EMAIL PROTECTED]
-----------------------------------------------------------------------------
YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRNG MAILING LIST
The address you post from MUST be your subscription address
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
