[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: (OT) exec nonreadable shell scripts



would writing scripts in a compiled language like
C be a solution? 

can a user have permission to exec a script
contained in a directory they don't have read
access to?


xucaen

--- Rick <rick@beerdrinker.org> wrote:
> that is what I was afraid of.  I'd given some
> thought to sudo or suid but
> maybe letting users read the script is okay. 
> So much for security through
> obscurity ;)
> 
> thanks again
> rick
> 
> brian moore writes:
> 
> > On Wed, Jan 10, 2001 at 06:24:33PM +0000,
> Rick wrote:
> > > sorry for off-topic, but I've been banging
> my head trying to set up shell
> > > scripts that can be executed but not read
> by a user.  
> > 
> > Not doable.
> > 
> > The shell needs to read them in order to
> execute them.
> > 
> > (Well, you could do something REALLY evil
> like suid wrappers switching
> > them to a user id that could read the
> script.... but that is ugly.)
> > 
> > -- 
> > CueCat decoder .signature by Larry Wall:
> > #!/usr/bin/perl -n
> > printf "Serial: %s Type: %s Code: %s\n", map
> { tr/a-zA-Z0-9+-/ -_/; $_ = unpack
> > 'u', chr(32 + length()*3/4) . $_; s/\0+$//;
> $_ ^= "C" x length; } /\.([^.]+)/g; 
> > 
> > 
> > -- 
> > To UNSUBSCRIBE, email to
> debian-user-request@lists.debian.org 
> > with a subject of "unsubscribe". Trouble?
> Contact listmaster@lists.debian.org
> > 
> 
> 
> --
> When Gladstone was British Prime Minister he
> visited Michael Faraday's
> laboratory and asked if some esoteric substance
> called `Electricity'
> would ever have practical significance.
> "One day, sir, you will tax it," was the
> answer.
>                        -- Science, 1994
> 
> 
> -- 
> To UNSUBSCRIBE, email to
> debian-user-request@lists.debian.org 
> with a subject of "unsubscribe". Trouble?
> Contact listmaster@lists.debian.org
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/



Reply to: