[GE users] Only root can submit jobs

Reuti reuti at staff.uni-marburg.de
Sun Nov 28 21:58:36 GMT 2004


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "ISO-8859-10" character set.  ]
    [ Some special characters may be displayed incorrectly. ]

Quoting Christian Bolliger <christian.bolliger at id.unizh.ch>:

> The normal init scripts starts  sge_execd as admin user which shouldn't 
> be root.
> Starting it with the setuid seems to be a slightly smaller risk.

Wouldn't this allow any user to start another execd with root rights? And: 
execd will switch the user to the admin user, hence:

$ ps -e f -o user,ruser,command

may give you this:

sgeadmin root     /usr/sge/bin/lx26-x86/sge_execd


Cheers - Reuti

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
For additional commands, e-mail: users-help at gridengine.sunsource.net




More information about the gridengine-users mailing list