Hi Ken,

Kenneth Ölwing wrote on Tue, Nov 03, 2009 at 04:51:27PM +0100:

> Just as an aside - isn't it true that many/most/all (???) Unix/Linux  
> installs are set to disallow setuid *scripts*.

 $ cd /usr                              
 $ sudo sh -c 'echo "#!/bin/sh\nid" > testsuid'
 $ sudo chown root:wheel testsuid               
 $ sudo chmod 4550 testsuid                     
 $ ./testsuid                                   
uid=1041(ischwarze) euid=0(root) gid=10(users) groups=10(users), 0(wheel)
 $ id
uid=1041(ischwarze) gid=10(users) groups=10(users), 0(wheel)
 $ uname -a
OpenBSD ischwarze00.intranet.astaro.de 4.6 GENERIC#160 i386
 $ sudo rm testsuid                                       

But that doesn't say you should use it.

Besides, your WWW data partition is hopefully mounted nosuid.

Yours,
  Ingo
_______________________________________________
Perl-Unix-Users mailing list
Perl-Unix-Users@listserv.ActiveState.com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Reply via email to