Re: Run 4GL Program without Database Permissions?
Posted in 1996
Jonathan Leffler (johnl@informix.com) wrote: : You don't say what your platform is, but... Sorry, I forgot: SINIX 5.42 on SNI RM400 (SysVR4.1) : Programs run by root do not use LD_LIBRARY_PATH to search for shared libraries. : They only search in /usr/lib. This is for security reasons; otherwise, an unsuspecting : superuser could be fooled into using a custom C library which did all sorts of funny : things with the super-user privileges. True, but the programs are not SUID root, just the SUID bit is set for the owner of the pain therapy database: -rwsr-sr-x 1 schmerz schmerz 97489 Sep 03 15:25 postop.4ge : You need to create symbolic links in /usr/lib pointing to the I4GL shared libraries: I did. However, that didn't solve the problem. The program starts to run, but stops immediately with "No CONNECT permission". Does that mean that Informix ignores the "effective user id" which is set by the SUID bit? This would mean that it is impossible to run a 4GL program without having database permissions. Regards, Richard -- +----------------------------+-------------------------------------------+ | Dr. Richard Spitz | INTERNET: spitz@ana.med.uni-muenchen.de | | EDV-Gruppe Anaesthesie | Tel : +49-89-7095-3413 | | Klinikum Grosshadern | FAX : +49-89-7095-8886 | | 81366 Munich, Germany | | +----------------------------+-------------------------------------------+