[AUTO-SOLVED] Run an app as privileged user

Im preparing a package for an app that uses libpcap and requires administrative rights to run properly.
Currently, the .desktop file for launching this app contains something like this:
gksudo mono /foo/bar/app.exe
But it looks like in the moment the app is going to make use of the libpcap library, the rights get lost and the app just force closes...
I don't know if this is the best procedure for doing so, but certainly, if i run from a terminal:
sudo mono /foo/bar/app.exe
I get the expected results and behaviour....
Can anyone help me?
EDIT: Looks like I found the source of the issue.
If i want to run this app from console, i first have to cd inside of the same dire the .exe is located... so, how to put this into a .desktop file?
Thanks
EDIT #2:
Path=/foo/bar
inside the .desktop file ...... this did the trick
Thanks!!!
Last edited by Xi0N (2011-12-13 23:12:53)

Similar Messages

[SOLVED] Run X11 apps using sudo while following wiki

i was going through the wiki
https://wiki.archlinux.org/index.php/Su … using_sudo
added the line.
Defaults env_keep += "HOME"
[rho@turion ~]$ sudo visudo
visudo: >>> /etc/sudoers: syntax error near line 94 <<<
What now?
Options are:
(e)dit sudoers file again
e(x)it without saving changes to sudoers file
(Q)uit and save changes to sudoers file (DANGER!)
What now? Q
[rho@turion ~]$ sudo
sudo: >>> /etc/sudoers: syntax error near line 94 <<<
sudo: parse error in /etc/sudoers near line 94
sudo: no valid sudoers sources found, quitting
sudo: unable to initialize policy plugin
Last edited by rhoit (2012-11-16 11:59:50)

rhoit wrote:
$ pacman -Ss hdparm
$
can't find!
That could be a problem, given that hdparm is in core ...
Anyways, man page: http://linux.die.net/man/8/hdparm
(This all is pretty off-topic to the original thread; sorry moderators. I was merely using it as a rather blatant example of the "Warn the user but do what it is told to do" idea)

[SOLVED] Running GTK apps without themes

You will have to excuse me if this sounds wrong. But I wished to know if it's possible to run GTK themes without any GTK themes.
Justr curious what the results may actually be and how to go about disabling GTK theme entirely.
Last edited by wildfowl (2015-01-16 22:51:27)

I deleted all the themes and Raleigh is still the fallback theme.
Basically Windows 95.
No go.

How to enable a low privilege user to run an administrative script ?

Hello
I have a problem which seems to come from the lack of "sudo" in Windows.
I want standard low privileges users to be enable to run a script that will give them a result (i-e DB status on Exchange). I don't want to give them any right, so the only solutions i think about are
- to make a scheduled task on a server, and give them only the right to launch the task (but i'd prefer them not to be able to log on the server, so i don't like it)
- To create a webpage (ASP.NET, i guess) that runs the script when they click a button. I'm not a dev, i won't be able to do it easily but i think i will have to.
Do you have better ideas please ?

Signed scripts could include authorizations to be ran from some chosen users...
This is not possible in Windows because an process that can escalate inside of a user process allows the user process namespace to access the processes security context. This makes it possible for the process to see the credentials of the script. The password
also has to beencoded in a way that he user can decode so it is almost the same as giving out the admin password.
UAC is designed to protect an admin. Bypassing authentication or merging it with a users context defeats the security.
The closes we can come is to delegate the authority carefully or to provide a proxy service that is secure.
Access to read the Exchange DB status can be delegated without giving admin access to Exchange. Post in Exchange forum to learn how to set up Exchange read-only operators.
I recommend that this should be done as a set of reports exposed through a web site. The reports can be generated daily or more frequently. This would be more consistent with other management scenarios.
¯\_(ツ)_/¯

What privileges user should have to install and run weblogic on linux box

What privileges user should have to install and run weblogic on linux box ?

Hello.
Normal user if you don't want to listen to ip port < 1024 or write in protected directories (like /var).
Regards.

My ipod touch 3,5 gen have the 4.2.1 softwear version and need to update to 4.3 so I can run my app Numbers that I've just bought yesterday but it doesn't update automatically. I'm in Portugal. What can I do to solve This?

My ipod touch 3,5 gen works on 4.2.1 softwear version and need to update to 4.3 so I can run my app Numbers that I've just bought yesterday.It doesn't update automatically. I'm in Portugal. What can I do to solve this?

What model iPod do you have? A 2G only can go to 4.2.1. The 3G and 4G can go to the latest. 4.3.3. Identify your iPod here:
Identifying iPod models
What computer OS and version do you have? What version of iTunes is installed?

How do I run java app when user calls a number?

Hi all
Is it possible to run a java app everytime a user calls a number? It has to run before the call is placed. The app will do its job and then place the call using PlatformRequest().
Thanks
hsogra

Hi,
I believe in general this is not possible.
J2ME was designed in such a way that J2ME apps don't have permission to interrupt the normal functions of the phone (making/receiving calls, sending/receiving SMS).

Running an app as a different user to use encrypted directories

I have the following use case:
We ship our application to customers as a pre-configured windows 8.1 box that runs as a server in a closed network.
We want to provide access to the system to the customer for configuration, but we need to keep the software and the files created protected from unauthorized copying, even if somebody manages to steal the box and remove the hard disk.
My questions are:
Is it possible to create a special user for the application that uses bitlocker to encrypt the directories containing the application and its data, then allow users to run the application from a different account, where the application is run as that special
user, giving it exclusive access to the directories?
If we provide customers with an admin account, would they be able to take ownership of the directories?
If this is possible, how is it done? Obviously this requires a way to safely store the credentials for the app's special user. Can that be done safely?
I found a link to this app (http://www.robotronic.de/runasroben.html), which seems to allow something like this and sent an email to the developer asking him if the app would support my use case. I'm looking for alternatives that don't require additional
software.
Thanks!

Hi,
For you requirement, BitLocker cannot achieve this.
BitLocker encrypts all personal and system files on the operating system drive, fixed data drives, and removable data drives. BitLocker does not depend on the individual user accounts associated with files. BitLocker is either on or off, for all users or
groups.
On the other hand, another encrypted tool EFS, EFS encrypts files based on the user account associated with it.
EFS encrypts personal files and folders one-by-one and doesn't encrypt the entire contents of a drive. If a computer has multiple users or groups, each of them can encrypt their own files independently.
But we can share the encrypted file between users:
http://windows.microsoft.com/en-in/windows-vista/share-encrypted-files
Applies to Windows 7 also.
Alex Zhao
TechNet Community Support

I am having problems to run an app, there is an error display that says I need to set bonjour and that this app serial number has been used by another red user, could anybody guide me?

I am having problems to run an app, there is an error display that says I need to set bonjour services

Logic is the APPlication (program, app) that you are having the problem with.
Logic Pro can take advantage of other computers on your local (home or work) network to help it do "heavy lifting" data chores by using Bonjour and a feature called Nodes. It seems that Logic is attempting to find and connect to another machine on your network.
Do you have Logic installed on another computer there? That may be the source of the confilict.
You might want to post this question in the Logic Pro Community.
Be sure to indicate the version of Logic Pro that you are using. I'm sure the folks there can help you out.

[SOLVED] Running a startup script as a user at boot once

Hello!
So, as the title suggests, I am trying to start a script as a specific user at boot. To avoid accidentally starting it multiple times, I don't want it to run every time to user logs in. So far I've looked into creating a custom systemd service to call a script as root then using 'sudo -u user script' to run said script.
This almost worked, the script must have executed but, because it was starting a new task in a screen, it created a dead screen. Although I'm not entirely sure why (I suspect it has something to do with not running screen as the logged in user), I figured I would ask if anyone knew of a better way to do this. My solution so far is pretty convoluted.
Side notes: This is running on a GUI-less server (hence the possibility of a user logging in multiple times or having multiple sessions open at once)
Last edited by Lindenk (2013-07-09 15:33:45)

Sure,
Here's essentially the unit file -
[Unit]
Description=Runs a script to run a script to start a script to start a server
[Service]
ExecStart=/absolute/path/to/a/rootScript.sh
[Install]
WantedBy=multi-user.target
And the root script
#!/bin/bash
#This script will run another script as the user 'server'
sudo -u server /path/to/userScript.sh
And the user script
#insert possible setup stuff here
screen -S serv -d -m /path/to/server/start.py
#insert possible cleanup stuff here
Also as a side note, I did already allow root to run commands as server without a password.
EDIT: Another side note, the root script and user script do in fact work as intended when started individually. When running through systemd (at boot or not), the screen created is dead.
Last edited by Lindenk (2013-07-09 14:36:54)

Error Running Oracle Apps and Discoverer at the same time

Hello,
We are having trouble running Oracle Apps and Discoverer at the same time on certain user's machines. Here are the specifics:
The user opens Oracle Apps in Internet Explorer. The user then opens Discoverer in another Internet Explorer windows and receives the following error: Runtime Error! Program: C:\Program Files\Internet Explorer\iexplore.exe abnormal program termination
As a work around, I installed Firefox on those user's machines. These users run Oracle Apps in Internet Explorer and run Discoverer in FireFox. This has solved the problem in 99% of the cases. However, there is one user who is having FireFox using Discoverer freeze when running Oracle Apps in Internet Explorer.
Can anyone provide any insight on how I can solve these conflict issues so users can run Oracle Apps and Discoverer at the same time?
Thanks in advance for your help,
Carlos

Hi Michael,
I agree with you completely. It is reccommended to run 10g on a separate physical server unless you have sufficient resources to run on the same server (which even most large clients do not) Even then, I would recommend a separate server.
I should have put my comment in context :-)
a.) I was only stating that it was possible
and
b.) whether 10g is installed on the same physical server or separate should not affect the client browser crashing issue that was posted.
I do have an install with EBS11i and Discoverer 10g on the same physical server and it works fine (this is sandbox/ TEST). Most of my large customers have 10g installed on multiple physical servers due to load balancing (capacity).
I do work for Oracle. I try to help out on the forum when I can, but it is hit or miss :-(
I would be glad to discuss anything privately.
As for the issue at hand, I can reproduce the problem and here is what is occuring.
I have EBS 11i configured with Jiniator 1.3.24
I have Discoverer 10g configured with Sun Java plugin 1.4.2_06
1. If you launch EBS 11i apps and a form with MS IE, then the browser launches the form using Jiniator JRE 1.3.xx (whatever you have configured in AutoConfig for EBS11i)
2. Next, the user navigates to EBS 11i SSWA and launches a Discoverer workbook.
What occurs is a child IEXPLORE.exe process is spawned from the parent IEXPLORE.exe process and Discoveer Plus is launched. The parent iexplore.exe process will be attached to the Jiniator JVM. Now if Discoverer is configured with
a.) Sun Java Plugin or
b.)a version of Jinitiator that is a different version from what EBS 11i is configured with
then you may get this conflict.
It really is an MS IE/JRE conflict with Jinitiator and Sun Java Plugi and the way the broswers attaches to the JVM (IMHO) as this behaviour could be reproduced with other non-oracle java applets.
You can workaround the situation by:
a. configure EBS11i and Discoverer to use the same version of Jiniator 1.3.xx
b. educate the users to open one MS IE browser to connect to EBS11i and then open a second MS IE browser to login to EBS11i SSWA or Discoverer 10g Plus directly to launch workbooks. They need to to this by clicking on the icon and not using File >> New browser. Clicking on the icon will spawn a new parent iexplore.exe process that can attach to a second/different JVM. File >> New Window will spawan a child of the parent.
c. As you did use two browser versions. MS IE for EBS11 connection and FireFox for Disocverer 10g connection.
I would choose optoin b, so that you can use Sun Java Plugin with Discoverer.
Open to any comments. I hope that helps you workaround the problem. The ideal solution is to have EBS 11i use/cerified with the 1.4 or 1.5 JRE. In poking around, I see there is a related post to this on one of Oracle's EBS 11i Product Managers Blog.
See:
http://blogs.oracle.com/schan/2006/04/18#a23

Cannot run X apps in a docker container

Hi, I have a Dockerfile which enables me to run X apps.
It works perfectly in Ubuntu, but not in Archlinux:
FROM mascip/archlinux:2014.12.09
# To avoid a bug with the filesystem: https://registry.hub.docker.com/u/base/arch/
RUN sed 's/^CheckSpace/#CheckSpace/g' -i /etc/pacman.conf
# BROWSERS
RUN pacman --noconfirm -S nvidia-libgl && pacman --noconfirm -S leafpad
# NON-ROOT USER
# Replace you uid, gid, and username
RUN pacman --noconfirm -S sudo
RUN export uid=1000 gid=1000 && the_user="abla" && \
the_home="/home/${the_user}" && \
the_capital_user=$(echo $the_user | sed 's/./\U&/') && \
mkdir -p $the_home && \
echo "${the_user}:x:${uid}:${gid}:${the_capital_user},,,:/${the_home}:/bin/bash" >> /etc/passwd && \
echo "${the_user}:x:${uid}:" >> /etc/group && \
echo "${the_user} ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/${the_user} && \
chmod 0440 /etc/sudoers.d/${the_user} && \
chown ${the_user}:${the_user} -R ${the_home}
# Replace username and home
ENV USER abla
ENV HOME /home/abla
WORKDIR /home/abla
USER abla
CMD /usr/bin/leafpad
In order to run it, I do:
$ docker build -t a1 .
$ docker run -ti \
-e DISPLAY -e XAUTHORITY=/tmp/.Xauthority -v /home/user/.Xauthority:/tmp/.Xauthority -v /tmp/.X11-unix:/tmp/.X11-unix \
a1 leafpad
which works in Ubuntu (a Leafpad window opens), but not in Arch where I get:
leafpad: Cannot open display:
PS: I have a similar Docker container which runs leafpad in a Ubuntu container; the problem is exactly the same for that container too.
PPS: the Dockerfile stems from here: http://fabiorehm.com/blog/2014/09/11/ru … th-docker/
Edit: I need to make it work soon. I would appreciate any idea to investigate further. I find X11 magic very confusing.
Last edited by mascip (2015-03-02 14:09:58)

I have tried checking that the Xserver was running with
$ ps aux | grep X
and it wasn't (is that even possible, as things were displaying on my screen?)
So I installed the whole xorg group:
$ sudo pacman -Sy xorg
After that, startx wouldn't start anymore, and I had to upgrade everything:
$ sudo pacman -Syu
which fixed the problem.
Now the X server is running:
$ ps aux | grep X
grep: warning: GREP_OPTIONS is deprecated; please use an alias or script
root 335 0.8 1.0 289376 42688 tty1 Ssl+ 06:46 0:01 /usr/lib/xorg-server/Xorg :0 -seat seat0 -auth /run/lightdm/root/:0 -nolisten tcp vt1 -novtswitch
user 459 0.0 0.2 304648 9980 ? Ssl 06:46 0:00 /usr/bin/lxsession -s LXDE -e LXDE
user 531 0.4 0.6 497908 24460 ? Sl 06:47 0:00 lxpanel --profile LXDE
user 532 0.2 0.8 607376 34960 ? Sl 06:47 0:00 pcmanfm --desktop --profile LXDE
user 944 0.0 0.0 10712 2256 pts/1 S+ 06:49 0:00 grep --color=auto X
but Leafpad still won't be displayed and throws the same error.
Any more ideas?
Last edited by mascip (2015-03-02 08:04:26)

Error auto-deploying a Web App (.WAR file)

Hello,
Weblogic 6.1 throws a FileNotFoundException about 10% of the time for me when
auto-deploying a Web app. Has anyone else run into this? I searched the newsgroups
but didn't come up with anything, so I thought I'd start here.
My build/deploy cycle is managed by an Ant build file that creates a WAR file
of my web application and then drops it into $WL_HOME/config/mydomain/applications.
Occasionally when I do this, I get the error shown below. Originally I was building
the WAR file right in the ../applications directory, so I thought that might be
an issue. So, I started building the WAR file in a staging directory and copying
it into ../applications. No luck. Next, I tried deleting the original WAR file
from ../applications, and THEN copying the new one over from the staging directory.
Still fails occasionally.
Let's see. This is Weblogic 6.1 on Win2K. The only other thing is that my dev/build/staging
environment is on a network share, and it's from there that I'm copying the WAR
file to my local machine (where WL is running).
If someone has seen and/or knows what is up with this, great. If not, it's not
a show-stopper.
Thanks!
Cheers,
David
========================================================
<Apr 8, 2002 9:05:00 AM PDT> <Error> <Management> <IOException opening application
mydomain:Name=private-banking,Type=Application, loading from path .\config\mydomain\applications\private-banking.war
java.io.FileNotFoundException: error in opening zip file
     at weblogic.management.mbeans.custom.Application.findType(Application.java:1833)
     at weblogic.management.mbeans.custom.Application.adminLoad(Application.java:444)
     at weblogic.management.mbeans.custom.Application.load(Application.java:387)
     at java.lang.reflect.Method.invoke(Native Method)
     at weblogic.management.internal.DynamicMBeanImpl.invokeLocally(DynamicMBeanImpl.java:636)
     at weblogic.management.internal.DynamicMBeanImpl.invoke(DynamicMBeanImpl.java:621)
     at weblogic.management.internal.ConfigurationMBeanImpl.invoke(ConfigurationMBeanImpl.java:359)
     at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1555)
     at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
     at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:468)
     at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:209)
     at $Proxy8.load(Unknown Source)
     at weblogic.management.mbeans.custom.ApplicationManager.poll(ApplicationManager.java:840)
     at weblogic.management.mbeans.custom.ApplicationManager.poll(ApplicationManager.java:733)
     at weblogic.management.mbeans.custom.ApplicationManager.update(ApplicationManager.java:206)
     at weblogic.management.mbeans.custom.ApplicationManager$ApplicationPoller.run(ApplicationManager.java:1050)

Michael,
This is a problem with 6.1 SP2 also -- a very annoying error. Without auto deploy
working properly, developers are spending alot of time waiting for WebLogic to restart.
HELP!!! we need this fixed.
I see the EXACT same stack trace (ERROR).
Tom Markel
Sr. Java Engineer
Michael Young <[email protected]> wrote:
Hi.
This may be a known issue that was addressed in sp2. If you are not already
at that sp level I suggest you upgrade.
Regards,
Michael
David Ventimiglia wrote:
Hello,
Weblogic 6.1 throws a FileNotFoundException about 10% of the time forme when
auto-deploying a Web app. Has anyone else run into this? I searchedthe newsgroups
but didn't come up with anything, so I thought I'd start here.
My build/deploy cycle is managed by an Ant build file that creates a WARfile
of my web application and then drops it into $WL_HOME/config/mydomain/applications.
Occasionally when I do this, I get the error shown below. OriginallyI was building
the WAR file right in the ../applications directory, so I thought thatmight be
an issue. So, I started building the WAR file in a staging directoryand copying
it into ../applications. No luck. Next, I tried deleting the originalWAR file
from ../applications, and THEN copying the new one over from the stagingdirectory.
Still fails occasionally.
Let's see. This is Weblogic 6.1 on Win2K. The only other thing is thatmy dev/build/staging
environment is on a network share, and it's from there that I'm copyingthe WAR
file to my local machine (where WL is running).
If someone has seen and/or knows what is up with this, great. If not,it's not
a show-stopper.
Thanks!
Cheers,
David
========================================================
<Apr 8, 2002 9:05:00 AM PDT> <Error> <Management> <IOException openingapplication
mydomain:Name=private-banking,Type=Application, loading from path .\config\mydomain\applications\private-banking.war
java.io.FileNotFoundException: error in opening zip file
at weblogic.management.mbeans.custom.Application.findType(Application.java:1833)
at weblogic.management.mbeans.custom.Application.adminLoad(Application.java:444)
at weblogic.management.mbeans.custom.Application.load(Application.java:387)
at java.lang.reflect.Method.invoke(Native Method)
at weblogic.management.internal.DynamicMBeanImpl.invokeLocally(DynamicMBeanImpl.java:636)
at weblogic.management.internal.DynamicMBeanImpl.invoke(DynamicMBeanImpl.java:621)
at weblogic.management.internal.ConfigurationMBeanImpl.invoke(ConfigurationMBeanImpl.java:359)
at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1555)
at com.sun.management.jmx.MBeanServerImpl.invoke(MBeanServerImpl.java:1523)
at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:468)
at weblogic.management.internal.MBeanProxy.invoke(MBeanProxy.java:209)
at $Proxy8.load(Unknown Source)
at weblogic.management.mbeans.custom.ApplicationManager.poll(ApplicationManager.java:840)
at weblogic.management.mbeans.custom.ApplicationManager.poll(ApplicationManager.java:733)
at weblogic.management.mbeans.custom.ApplicationManager.update(ApplicationManager.java:206)
at weblogic.management.mbeans.custom.ApplicationManager$ApplicationPoller.run(ApplicationManager.java:1050)--
Michael Young
Developer Relations Engineer
BEA Support

How Do I Run the Apps?

Hello all - have an HP Envy 4500, using the eprint centre, sched apps printing OK, but confused as to how to run the apps on demand. For example, HP Quick Forms. I can schedule, I can look at samples, but how does one print out a desired sheet such a sheet of graph paper on demand? I can't figure that one out, and also how does one post a comment. I don't see any button for that either. Another example is the App "Universal Crossword". I can schedule it and have them print, but how can I manually print one? So this applies to all the apps, how does one simply use them on demand instead of scheduling. Clickong on the app itself just gives the sample views.
Thanks for any help.
This question was solved.
View Solution.

Hi harrc,
Welcome to the HP Support Forums. I see that you have some questions about the apps you find in HP Connected.
To print a sample of any of the HP Quick Forms, you can print them on demand from the front panel of the printer. As for the remaining apps, there isn’t an on-demand option available. For reference I’ve included the Getting Started With HP Printables.
Regards,
Happytohelp01
Please click on the Thumbs Up on the right to say “Thanks” for helping!
Please click “Accept as Solution ” on the post that solves your issue to help others find the solution.
I work on behalf of HP

Login twice in same apex app by same user not possible

Hi,
In itself it is possible to login twice by same user in same appl.
But when using both apps on diff pages eachtime the user is prompted to login again.
Why is that and why cant'w we use the app twice by same user.
It is possible to use same app by same user twice
Thanks in advance,
Hugo

I think it is probably due to your cookie and the session state. I cannot use IE or FF to access the same application twice with the same id, otherwise if I do different searches or change pages, the sesiion in the other window gets confused and starts showing session state varibale from the other window. This is with two different windows (not tabs) of IE or FF running.
But, I can easily use IE, FF, and Chrome to access the same application with the same credentials, and everything will work as if I logged in with three different ids. I barely remember this 'problem' from 'the old days', and cookies had something to do with it. It "may" have been that the solution (in some cases, depending on what you and the app are doing), was during the authenication process that every app creates and uses a cookie with the same name.
Hope this helps some,
Bill Ferguson

[AUTO-SOLVED] Run an app as privileged user

Similar Messages

Maybe you are looking for