*BSD News Article 59992


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mel.connect.com.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.uoknor.edu!news.nodak.edu!netnews1.nwnet.net!news.u.washington.edu!uw-beaver!uhog.mit.edu!news.mathworks.com!fu-berlin.de!zrz.TU-Berlin.DE!zib-berlin.de!unlisys!desert!heaven7.snafu.de!usenet
From: martini@heaven7.snafu.de (Martin Ibert)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: execve() ignores shell script setuid bit
Date: 24 Jan 1996 19:48:37 +0100
Organization: The Seventh Heaven, Berlin, Germany
Lines: 18
Sender: martini@cumulus.sky.bln.sub.org
Message-ID: <ufrawpqvi2.fsf@cumulus.sky.bln.sub.org>
References: <30FEC809.167EB0E7@lasorda.princeton.edu>
NNTP-Posting-Host: cumulus.sky.bln.sub.org
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
In-reply-to: Luoqi Chen's message of Thu, 18 Jan 1996 17:22:01 -0500
X-Newsreader: Gnus v5.1

In article <30FEC809.167EB0E7@lasorda.princeton.edu> Luoqi Chen <luoqi@lasorda.princeton.edu> writes:

[SetUID script not working]

: Is this a bug or a feature?

Most probably a feature. If it worked, it would be bug. SetUID scripts
are a first-rate no-no; shells are just too easily tricked.

Write a C program instead. Or use perl.
-- 
|     __*__     || Martin Ibert - Fürstenweg 11 - D-13589 Berlin-Spandau - EU |
| ----|   |---- || martini@heaven7.snafu.de/Fon +49303753479/Fax +49303753699 |
| ============= || ---------------------------------------------------------- |
| | | |   | | | ||       "Blind faith in your leaders, or in anything,        |
| | | |   | | | ||         will get you killed." (Bruce Springsteen)          |

PGP key is available from any key server or from <http://www.snafu.de/~martini>