On Tue, Jan 09, 2001 at 09:44:12PM -0800, Peter Jay Salzman wrote:
> hmmm... i was under the impression that suid wasn't honored for scripts?
>
> or was that just bash scripts?
It is a kernel restriction (warranted or paranoid as the case may be) but it
can be bypassed if need be by writing a little C wrapper:
#define REAL_PATH "/path/to/script"
main(ac, av)
char **av;
{
execv(REAL_PATH, av);
}
(Shamelessly ripped from perlsec(1p).)
Perl does this for you if you choose to use its setuid script facilities.
--
Henry House
OpenPGP key available from http://hajhouse.org/hajhouse.asc
Attachment:
pgpuve6BzRePL.pgp
Description: PGP signature