*BSD News Article 60008


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mira.net.au!yarrina.connect.com.au!news.mel.connect.com.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.cis.okstate.edu!news.ksu.ksu.edu!news.physics.uiowa.edu!newsrelay.iastate.edu!vixen.cso.uiuc.edu!newsfeed.internetmci.com!news.mathworks.com!udel!cnn.Princeton.EDU!usenet
From: Luoqi Chen <luoqi@lasorda.princeton.edu>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: execve() ignores shell script setuid bit
Date: Thu, 18 Jan 1996 17:22:01 -0500
Organization: Princeton University
Lines: 8
Message-ID: <30FEC809.167EB0E7@lasorda.princeton.edu>
NNTP-Posting-Host: drysdale.princeton.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 2.0b4 (X11; I; FreeBSD 2.1.0-RELEASE i386)
CC: chenl@lasorda.princeton.edu

I installed FreeBSD on my PC just a couple of weeks ago. Today I noticed
that setuid shell script doesn't run with effective uid set. I checked
with kern_exec.c, it seemed to me that execve() uses the attributes
of the interpreter rather than those of the script, to check for the
setuid and setgid bits. Is this a bug or a feature (or simply I misread
the source code)? I am using FreeBSD 2.1 release.

-lq