Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.bhp.com.au!mel.dit.csiro.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.uoknor.edu!news.nodak.edu!netnews1.nwnet.net!news.u.washington.edu!uw-beaver!uhog.mit.edu!news.mathworks.com!fu-berlin.de!news.dfn.de!news.uni-jena.de!news.HRZ.HAB-Weimar.DE!News.HTWM.De!news.tu-chemnitz.de!irz401!uriah.heep!news From: j@uriah.heep.sax.de (J Wunsch) Newsgroups: comp.unix.bsd.freebsd.misc Subject: Re: execve() ignores shell script setuid bit Date: 26 Jan 1996 23:17:26 GMT Organization: Private BSD site, Dresden Lines: 19 Message-ID: <4ebne6$ke2@uriah.heep.sax.de> References: <30FEC809.167EB0E7@lasorda.princeton.edu> <ufrawpqvi2.fsf@cumulus.sky.bln.sub.org> <DLpKsB.FF1@ritz.mordor.com> Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) NNTP-Posting-Host: localhost.heep.sax.de Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Newsreader: knews 0.9.3 bet@ritz.mordor.com (Bennett Todd) writes: > >Write a C program instead. Or use perl. > You'll have to make an executable with a compiled language like > C. You can't use perl --- it's a #!-magic scripting language. Please, have a look at Perl before posting misinformation. It works, though it doesn't work the way you think it worked. And i consider it much more secure than a simple setuid C wrapper. Read the Perl man page to learn more about the reasons. -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)