🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sco.opendesktop
Article #64

Re: Setting set-uid on a script

#64
From: Hildo den Breejen
Date: Mon, 13 Jun 1994 14:48
27 lines
1806 bytes
gb@buran.fb10.tu-berlin.de (Guenter Becker) writes:

.
.
.
>You are right, you can't suid a shell script. Someone said, this is for  
>security reasons. What you can do, if you have network software installed:
>rcmd localhost -l root <command>
>This is not very secure, however ...

>G. Becker

I believe suid on scripts is not implemented because scripts are not
actualy started by the kernel, but by a shell, say /bin/sh.

rcmd localhost -l root <command>
will ask you for root's password, unless root has a .rhosts file
explicitly allowing everyone access to the root account... 

I think one should compile a tiny c program that runs suid and
exec()'s the script.
Using an exec() variant that accepts scripts that is.
-- 
Hildo den Breejen <hildo@ideta.nl>		
Ideta b.v., Frankemaheerd 6, 1102 AN Amsterdam, the Netherlands
My opinions are my own, not necessarily my boss's
----------------------------------------------------------------------------
Technical Details
Message-ID: <CrCBtL.2An@ideta.nl>
Path: arc1-ca.pugleaf.net!nntp.gmd.de!Germany.EU.net!EU.net!sun4nl!ideta.nl!hildo
References: <gburnoreCr7Czw.Jnz@netcom.com> <2thlav$oio@news.cs.tu-berlin.de>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1020c6,ddbf95e66b947726
X-Google-Attributes: gid1020c6,public
X-Google-Thread: 134180,ddbf95e66b947726
X-Google-Attributes: gid134180,public
X-Google-Thread: ff1d1,ddbf95e66b947726
X-Google-Attributes: gidff1d1,public
X-Google-Thread: 1122ea,ddbf95e66b947726
X-Google-Attributes: gid1122ea,public
X-Google-ArrivalTime: 1994-06-13 08:15:08 PST
Newsgroups: sco.opendesktop,biz.sco.general,biz.sco.opendesktop,comp.unix.admin
Path: arc1-ca.pugleaf.net!nntp.gmd.de!Germany.EU.net!EU.net!sun4nl!ideta.nl!hildo
From: hildo@ideta.nl (Hildo den Breejen)
Subject: Re: Setting set-uid on a script
Organization: Ideta bv
Date: Mon, 13 Jun 1994 14:48:56 GMT
Message-ID: <CrCBtL.2An@ideta.nl>
References: <gburnoreCr7Czw.Jnz@netcom.com> <2thlav$oio@news.cs.tu-berlin.de>
Lines: 27