*BSD News Article 67260


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mira.net.au!inquo!in-news.erinet.com!en.com!news.his.com!news2.cais.net!news.cais.net!newsfeed.internetmci.com!usenet.eel.ufl.edu!usenet.cis.ufl.edu!usenet.ufl.edu!pelican.unf.edu!osprey.unf.edu!caddy
From: caddy@osprey.unf.edu (Cliff Addy)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Does setuid work???
Date: 30 Apr 1996 20:29:28 GMT
Organization: University of North Florida
Lines: 13
Message-ID: <4m5t78$npb@pelican.unf.edu>
References: <4m3ekt$7ar@portal.gmu.edu> <4m587t$8h6@solaris.cc.vt.edu>
NNTP-Posting-Host: osprey.unf.edu
X-Newsreader: TIN [version 1.2 PL2]

John Murray (jmurray@vt.edu) wrote:
: FreeBSD and most other modern UNIX's will not let you run setuid scripts. 
: But the perl authors knew this and made a special version of perl(comes with
: the standard distribution) called suidperl, that allows setuid perl scripts. 
: This version of perl also does checking to make sure your setuid prog is
: some what safe.  To use suidperl just replace the #!/usr/bin/perl with
: #!/usr/bin/suidperl and now your script should work.

Except that perl is *supposed* to notice the script is suid and invoke 
suidperl on its own. According to the perl references I have, you should
never run suidperl directly.  Of course, on freebsd you have to.

Cliff