Posted by danish on 10/14/20 11:41

Jerry Stuckle wrote:
> danish wrote:
> > hi everyone..sorry everyone if ive posted on the wrong group but i
> > really needed help....
> >
> > i wan tto start jakarta-tomcat-5.5.3 from the webbrowser using the
> > sheel scripts...i normally use the shell scripts from the command line
> > to start and stop the tomcat server.....
> >
> > i found out that php gives this incredible facility where i can execute
> > normal bash commands...i tried doing so ..but a simple command like {
> > system('whoami') } from
> > browser......eg.....http://localhost/startup.php..
> >
> > prints apache as the user....so technically it executes the tomcat
> > startup script as apache user..but ive got
> > jakarta-tomcat-5.5.3 under the tomcat user....can someone please tell
> > me is there a way in php coding wherein i can execute the command as
> > another....i know this seems a bit out of place...but i really didnt
> > know anywhere else to go
> >
> > danish
> >
>
> Not if the OS won't let you.
>
> You potentially could do a posix_setuid to change the uid, but that has
> to be allowed by the OS and most won't because of the potential (huge)
> security risk.
>
> You may be able to su to the tomcat user - but again the OS must be set
> up to allow it.
>
> You can't do anything the OS won't allow. What you really need is a
> Unix Admin to set up the permissions you need.
>
> --
> ==================
> Remove the "x" from my email address
> Jerry Stuckle
> JDS Computer Training Corp.
> jstucklex@attglobal.net
> ==================

well..im not very familiar with setuid n stuff...but from what ive
tried....i can sudo to the tomcat user or if i want use a normal user
to start tomcat using sudo.....but basically i dont want that....i
heard that tomcat can be integrated with php..if that is possible maybe
i can execute normal commands as the tomcat user..and as the tomcat
user is allowd to start tomcat..maybe i can start tomcat from the
webpage....what du u think



danish

[Back to original message]