[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] How to run jobs as root



On 11/3/14 10:53 AM, Zachary Miller wrote:
>   3) Create a USER_JOB_WRAPPER that *CAREFULLY* checks to see if it's running
>      as "croot" and uses a setuid executable to escalate to root priv before
>      running the actual job.

I still maintain that reimplementation without the UID 0 requirement is
the best course. That said, using sudo is a much safer mechanism for
elevating privileges than using setuid binaries.

-- 
Rich Pieri <ratinox@xxxxxxx>
MIT Laboratory for Nuclear Science