System command on FreeBSD...

Chad McWilliams chad at computiprint.com
Wed Dec 29 13:15:52 PST 2004



> -----Original Message-----
> From: 
> filepro-list-bounces+fpmail=computiprint.com at lists.celestial.c
> om 
> [mailto:filepro-list-bounces+fpmail=computiprint.com at lists.cel
> estial.com] On Behalf Of Bill Vermillion
> Sent: Wednesday, December 29, 2004 12:54 PM
> To: filePro List
> Subject: Re: System command on FreeBSD...
> 
> 

> Since 'id' will return the id and group memberships [of which 
> there can be many in the BSD world] I think the only thing 
> you can really depened upon to find the calling user is to 
> use the 'who am i' command.  This will return the ID of the 
> actual login.  Do NOT confuse this with the 'whoami' command 
> which will return the EUID.
> 
> There aren't many things that are that different from the 
> Unix systems and the BSD systems - but his is certainly one of them.
> 
> I also have problem with the way part of the 'su' is 
> implemented as using multiple 'su's can give some permissions 
> they are not supposed to have.  I got a lively discussion 
> started and many didn't see the problem, but then in the end 
> those who run secure system think the su stack should be 
> limited to one - and that would
> fix any potential holes.    I had been using the FreeBSD for quite
> awhile when I discovered that one, and to my way of thinking 
> it is an anomoly.
> 
> But I think parsing the output of 'who am i' will do what you 
> need it to do.
> 

This was also the idea I came up with as a fallback.  The only problem
is a lot of programs will have to be changed, so I wanted to make sure
there wasn't another way.

This does have one other effect though: If the person, while shelled
into the second filepro program, were to add or modify a record, I'm
guessing the @cb and @ub (or whatever the system maintained field for
updated by is) would store the same as what @id was reporting which
would be filepro, not the actual user.

-Chad McWilliams



More information about the Filepro-list mailing list