Re: Run 4GL Program without Database Permissions?
Posted in 1996
Richard, I didn't catch the beginning of this thread, but I just wanted to make sure you've considered the connect statement. In your 4gl program you can connect to a database as a different user, without fiddling with user id's at the unix level. Like you say, suid to root is scary. Does this do anything for you? Richard Spitz wrote: > : Does that mean that Informix ignores the "effective user id" which is > : set by the SUID bit? This would mean that it is impossible to run a 4GL > : program without having database permissions. > > In the meantime, I was led onto the (probably, still have to try!) right > path by an e-mail from someone else at Informix: > > Informix programs do indeed use the "real user id", not the "effective > user id". So I have to set the "real user id", which is something only > root can do. So the program has to be suid root and has to set the > "real user id" inside the program before any database connection is made. > Having to write a program that is suid root send shivers down my spine, > but I guess I'll have to live with that. ---------------------------------------------------------------------- John H. Frantz Power-4gl: Extending Informix-4gl frantz@centrum.is http://www.strengur.is/~frantz/pow4gl.html