Running as root on Solaris 8

jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

Running as root on Solaris 8

Post by jim.matthews »

I changed all files to be owned by nsuser. I killed the current processes.

How do I remove the shared mem segment (Solaris 8)? I thought it was:

% ipcs
IPC status from <running system> as of Wed Jun 4 15:10:05 EDT 2003
T ID KEY MODE OWNER GROUP
Message Queues:
Shared Memory:
m 1 0x50000b03 --rw-r--r-- root root
m 2 0xdbaccee5 --rw-rw-rw- texis texis
m 2903 0x1006938 --rw------- root other
Semaphores:
s 262144 0 --ra-ra-ra- root other
s 1048577 0 --ra-ra-ra- root other
s 262146 0 --ra-ra-ra- root other
s 2162691 0 --ra-ra-ra- nsuser nobody
s 4718596 0 --ra-ra-ra- root other
s 458757 0 --ra-ra-ra- nsuser nobody
% ipcrm -m 0xdbaccee5

But if I type ipcs again, the same shared mem segment is still present in the output (owned by texis).
User avatar
mark
Site Admin
Posts: 5513
Joined: Tue Apr 25, 2000 6:56 pm

Running as root on Solaris 8

Post by mark »

ipcrm -m 2
User avatar
Kai
Site Admin
Posts: 1271
Joined: Tue Apr 25, 2000 1:27 pm

Running as root on Solaris 8

Post by Kai »

Also kill any non-nsuser Texis processes, now that you're switched to nsuser.
jim.matthews
Posts: 19
Joined: Tue Jun 03, 2003 5:28 pm

Running as root on Solaris 8

Post by jim.matthews »

Thanks, that cleared up those problems. Question though--why do I have to run texis as the same user as my web server? On my production machine, we have version 4.00.1020139637 of Apr 30, 2002 (sparc-sun-solaris2.5.1-32) running and I have my webserver and texis running as two separate users:

texis 4070 1 0 06:23:50 ? 0:00 monitor -d /usr/local/morph3/texis/testdb/ -z
nsuser 13384 863 0 15:50:42 ? 0:00 /opt/apache/bin/httpd -DSSL

Things coexist peacefully there. I'm wondering why in this latest version I have to run everything under one user.
User avatar
mark
Site Admin
Posts: 5513
Joined: Tue Apr 25, 2000 6:56 pm

Running as root on Solaris 8

Post by mark »

You may run texis as any non-root user as long as it always runs that way. This is generally accomplished by making texis setuid to the desired user as the install does. However it would seem that your test webserver is setup to ignore/remove the setuid bit when running cgi programs so they run as whatever user it wants instead of the user it's supposed to run as.
Post Reply