*BSD News Article 74797


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.mel.connect.com.au!news.mira.net.au!inquo!news.seinf.abb.se!erinews.ericsson.se!eua.ericsson.se!cnn.exu.ericsson.se!newshost.convex.com!cs.utexas.edu!uwm.edu!vixen.cso.uiuc.edu!usenet.ucs.indiana.edu!news
From: Dana Canfield <dcanfiel@cqc.com>
Newsgroups: comp.unix.amiga,comp.unix.bsd.netbsd.misc
Subject: NetBSD PERL Setuid problem
Date: Thu, 25 Jul 1996 17:52:18 -0500
Organization: Indiana University, Bloomington
Lines: 19
Message-ID: <31F7FAA2.7341@cqc.com>
Reply-To: dcanfiel@cqc.com
NNTP-Posting-Host: pumbaa.physics.indiana.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 3.0b5aGold (Win95; I)
Xref: euryale.cc.adfa.oz.au comp.unix.amiga:13597 comp.unix.bsd.netbsd.misc:4169

I've been trying to get some setuid perl scripts to run, and have had no
luck.  I've asked some of the best NetBSD experts I know, and they don't
know how to do it either.  So, could somebody please explain to me
exactly how I can make a perl script switch to root?  Specifically, what
bits need to be set and what command needs to be run (I have a bad
suspicion there might be some recompiling of PERL involoved, but i'm not
sure).  What's in it for you is a single, powerful PERL script I've
written which allows your non-unix tech support guys to add and edit  
user accounts.  It's very intuitive and uses a PIN number system to
allow  multiple security levels, and is entirely self-contained.  I
intend to use it to allow my tech support people to verify & change
end-user passwords, and allow my sales people to enter new accounts.  
Unfortunately, it has to be run from the command line as root right now,
which does almost no good because I don't want my tech support and sales
people to have root access.  If I can get this setuid thing figured out,
it will not only allow me to do all that stuff, but will allow for full
account system administration via WWW.

Anyone who helps me get going can have a copy.  Thanks much.