🚀 go-pugleaf

>: We are running SCO v3.2.4.2 and are trying to make a root
>: owned script have a setuid attribute. We have done a chmod u+s
>: to it has well as having it owned by root. All to no avail. I am sure
>: this is in the FAQ but we couldn't find the FAQ. Could anybody give
>: us a lead ?

To the best of my knowledge, a shell script cannot be run SUID.  This
appears to be true in SCO as well as most other flavors of Unix.  However,
if you have either the development system or the GCC compiler, simply
compile a short C program to call the shell script.  Make the C program
SUID root, and for security purposes chmod the shell script itself to 700.
Another word of caution:  be absolutely sure that you specify a full
pathname to each external command you execute from the script, and be sure
that none of them are writable by unprivileged users.  If you don't do
these things, it's very simple for anyone who can execute the script to
run (as root) anything they like.

Also note that for execl() to work properly (on most systems), the
"#! /bin/sh" must exist as the first line of the shell script.  Use
whatever shell name you've written the script for, of course.

Sample code follows:

myscript.sh:

   #! /bin/sh
   /bin/ls -l | /bin/more

myls:

   int main()
   {
      execl ("/usr/local/bin/myscript.sh", "myscript.sh", 0);
   }


-- 
Chris Frederick  |  All things considered, insanity  |  To excel at something,
f1rederc@iia.org |  is the only logical alternative. |  you must love doing it.