Article View: sco.opendesktop
Article #64Re: Setting set-uid on a script
From: Hildo den Breejen
Date: Mon, 13 Jun 1994 14:48
Date: Mon, 13 Jun 1994 14:48
27 lines
1806 bytes
1806 bytes
gb@buran.fb10.tu-berlin.de (Guenter Becker) writes: . . . >You are right, you can't suid a shell script. Someone said, this is for >security reasons. What you can do, if you have network software installed: >rcmd localhost -l root <command> >This is not very secure, however ... >G. Becker I believe suid on scripts is not implemented because scripts are not actualy started by the kernel, but by a shell, say /bin/sh. rcmd localhost -l root <command> will ask you for root's password, unless root has a .rhosts file explicitly allowing everyone access to the root account... I think one should compile a tiny c program that runs suid and exec()'s the script. Using an exec() variant that accepts scripts that is. -- Hildo den Breejen <hildo@ideta.nl> Ideta b.v., Frankemaheerd 6, 1102 AN Amsterdam, the Netherlands My opinions are my own, not necessarily my boss's ----------------------------------------------------------------------------
Technical Details
Message-ID:
<CrCBtL.2An@ideta.nl>Path:
arc1-ca.pugleaf.net!nntp.gmd.de!Germany.EU.net!EU.net!sun4nl!ideta.nl!hildoReferences:
<gburnoreCr7Czw.Jnz@netcom.com> <2thlav$oio@news.cs.tu-berlin.de>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1020c6,ddbf95e66b947726 X-Google-Attributes: gid1020c6,public X-Google-Thread: 134180,ddbf95e66b947726 X-Google-Attributes: gid134180,public X-Google-Thread: ff1d1,ddbf95e66b947726 X-Google-Attributes: gidff1d1,public X-Google-Thread: 1122ea,ddbf95e66b947726 X-Google-Attributes: gid1122ea,public X-Google-ArrivalTime: 1994-06-13 08:15:08 PST Newsgroups: sco.opendesktop,biz.sco.general,biz.sco.opendesktop,comp.unix.admin Path: arc1-ca.pugleaf.net!nntp.gmd.de!Germany.EU.net!EU.net!sun4nl!ideta.nl!hildo From: hildo@ideta.nl (Hildo den Breejen) Subject: Re: Setting set-uid on a script Organization: Ideta bv Date: Mon, 13 Jun 1994 14:48:56 GMT Message-ID: <CrCBtL.2An@ideta.nl> References: <gburnoreCr7Czw.Jnz@netcom.com> <2thlav$oio@news.cs.tu-berlin.de> Lines: 27