🚀 go-pugleaf

In article <1992Nov7.203923.522@news.Hawaii.Edu> newsham@wiliki.eng.hawaii.edu (Timothy Newsham) writes:
>
>I just made an empty file with +x perms and typed in its
>name at the shell prompt.  It apparently tried to execute it
>and for some reason sourced my .cshrc.  This is on an older
>HPUX system.  I didnt however set it suid since I am a non-priveledged
>user so I cant tell you if it would work as suid.  (I think i
>remember that hpux wouldnt run shell scripts with out the '#!' in
>them as suid, maybe just a local patch?)

Most shells try to run scripts without a #! at the start by passing
the name as an argument to sh or csh.  This is entirely a shell
feature and has nothing to do with the kernel.  Because the shell is
non-privileged, the resulting process that sources your .cshrc will
also be.

So this is one case where setuid scripts are harmless (if also
ineffectual since even the legitimate code won't run with privilege).
-- 
---------------------------------------------+ "A tight hat can be stretched.
Pete Chown, pc123@phx.cam.ac.uk (Internet)   |  First damp the head with steam
            pc123@uk.ac.cam.phx (Janet :-)  -+  from a boiling kettle."