*BSD News Article 82729


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.Hawaii.Edu!news.uoregon.edu!arclight.uoregon.edu!usenet.eel.ufl.edu!news.mathworks.com!uunet!in3.uu.net!news.eden.com!arlut.utexas.edu!usenet
From: Ian Fink <fink@arlut.utexas.edu>
Newsgroups: comp.unix.admin,comp.unix.questions,comp.unix.bsd.bsdi.misc
Subject: Re: Setuid Problem
Date: Tue, 12 Nov 1996 10:07:59 -0600
Organization: Applied Research Laboratories - The University of Texas at Austin
Lines: 22
Message-ID: <3288A0DF.79B6@arlut.utexas.edu>
References: <566hj6$15l@sleipnir.iaccess.com.au> <32882ec6.691489491@news.u-net.com>
NNTP-Posting-Host: seadevil.arlut.utexas.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.0 (X11; I; HP-UX A.09.05 9000/730)
Xref: euryale.cc.adfa.oz.au comp.unix.admin:50245 comp.unix.questions:91124 comp.unix.bsd.bsdi.misc:5260

Jim wrote:
> 
> username@iaccess.com.au (Real Name) wrote:
> 
> >Hello,
> >
> >Im having problems getting setuid to work on a bsdi 1.1 system
> >I have set the owner of a file as root and the "s" bit as
> >follows:
> >
> >-rwsrwxr-x  1 root  wheel    1815 Nov  3 22:59 file.pl
> 
> This only works for compiled files not editable scripts.
> 
> Jim.

You would have to recompile your kernel for setuid scripts....
So it is possible to have setuid scripts, but that presents a BIG
security problem =(

Ian Fink
fink@arlut.utexas.edu