Article View: comp.security.misc
Article #763Re: Setuid script - is this unsecure?
From: J{rvinen Hannu-Matti
Date: Thu, 19 Nov 1992 13:47
Date: Thu, 19 Nov 1992 13:47
27 lines
1415 bytes
1415 bytes
In article <AMOSS.92Nov6102549@shuldig.cs.huji.ac.il> amoss@shuldig.cs.huji.ac.il (Amos Shapira) writes:
>A general suggestion for a programme which will do what you want would be:
>
>main (ac, av)
> int ac;
> char **av;
>{
> exec ("/usr/etc/mount", av);
>}
>
>and have the object of this C programme suid root.
Equivalent would be that you let anybody execute mount (i.e., set
mount suid), which is not reasonable. Also you have to deny suid
programs on the floppy, and ensure that there does not exist special
devices on the floppy.
I've written a set of programs (fdmkfs, fdmount, and fdumount) to give
users access to the floppy. They are available by anonymous ftp on
site cs.tut.fi (130.230.4.2), file pub/src/tut/floppy.shar. Use on
your own risk.
--
-----
Hannu-Matti Jarvinen, hmj@cs.tut.fi
Opinions of tut != opinions of mine, and vice versa.
TTKK on samaa mielt{ kanssani siit{, ett{ en edusta sen mielipidett{.
Technical Details
Message-ID:
<1eg5tmINN9eh@cs.tut.fi>Path:
arc1-ca.pugleaf.net!sparky!uunet!mcsun!news.funet.fi!news.cs.tut.fi!hmjReferences:
<1992Nov5.071354.24042@kth.se> <AMOSS.92Nov6102549@shuldig.cs.huji.ac.il>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!news.funet.fi!news.cs.tut.fi!hmj
From: hmj@cs.tut.fi (J{rvinen Hannu-Matti)
Newsgroups: comp.security.misc
Subject: Re: Setuid script - is this unsecure?
Date: 19 Nov 1992 13:47:34 GMT
Organization: Tampere University of Technology
Lines: 27
Distribution: world
Message-ID: <1eg5tmINN9eh@cs.tut.fi>
References: <1992Nov5.071354.24042@kth.se> <AMOSS.92Nov6102549@shuldig.cs.huji.ac.il>
NNTP-Posting-Host: kuukkeli.cs.tut.fi