"restricted" error - HELP!

Rob Henderson rob at sparky.HAC.COM
Fri Oct 7 11:41:17 AEST 1988


Greetings,

I give up!!  This problem has gotten the best of me so I am turning
to the net for help.  FYI, I'm running SunOS 3.4 on a Sun 3/260.

I have set up the following two accounts:

	dummy::0:1:dummy:/:/usr/local/bin/dummy_account
	fixdrip::0:1:fixdrip:/:/usr/local/bin/fixdrip_account

The login scripts (dummy_account and fixdrip_account) run another 
script (/sparky/rob/tmp/script.sh), which works for the dummy 
account but bombs with "restricted" messages for the fixdrip account.
The problem should be clear after you read the following:

===========================================

Script started on Thu Oct  6 17:52:32 1988
% egrep "dummy|fixdrip" /etc/passwd
dummy::0:1:dummy:/:/usr/local/bin/dummy_account
fixdrip::0:1:fixdrip:/:/usr/local/bin/fixdrip_account
% cd /usr/local/bin
% cat dummy_account
#! /bin/sh -f
/sparky/rob/tmp/script.sh
% cat fixdrip_account
#! /bin/sh -f
/sparky/rob/tmp/script.sh
% diff dummy_account fixdrip_account
% ls -lg dummy_account fixdrip_account
-rwxr--r--  1 root     wheel          40 Oct  6 17:51 dummy_account
-rwxr--r--  1 root     wheel          40 Oct  6 17:51 fixdrip_account
% cat /sparky/rob/tmp/script.sh
#! /bin/sh -f
echo The sh script worked
% su dummy
The sh script worked
% su fixdrip
/usr/local/bin/fixdrip_account: /sparky/rob/tmp/script.sh: restricted
% exit
script done on Thu Oct  6 17:54:02 1988

===========================================


My questions are:

1. What does the "restricted" message mean?
2. Why does the dummy account work while the fixdrip does not?
3. On a side note, I would appreciate if someone would fill me in on the
   security holes I am opening by having these accounts with the same
   uid as root.  My motivation for doing this is to give users limited
   access to root privileges.

Thanks for the help,

		--Rob Henderson

---
1st Choice: rob at tcville.hac.com 
2nd Choice: rgh at hac2arpa.hac.com
3rd Choice: (213) 616-4596
If all else fails: {seismo|allegra|...}!hacgate!tcville!rob



More information about the Comp.unix.questions mailing list