On Tue May 16, 2006 at 13:46:30 +1000, Peter Rundle wrote:
>
>Malcolm V wrote:
><snipped>
>>Read "man 3 system" as I suggested yesterday.
>
>Thanks Malcolm.
>
>>See "man 3 exec" for what you want.
>
>Changed
>  system(argv[1]);
>to
>  execlp(argv[1],argv[2]);
>
>in the source and now when it runs we see a different result
>
>$ ./suidexec id
>Executing Command 'id'
>uid=501(prundle) gid=501(prundle) euid=502(matlab) groups=502(matlab) 
>context=user_u:system_r:unconfined_t
>
>But it doesn't trick the Matlab licence manager.
>
>$./suidexec /home/matlab/product/bin/matlab
>Executing Command '/home/matlab/product/bin/matlab'
>
>License Manager Error -39.
>User/host not on INCLUDE list for feature.
>
>How hum. Something about a square, a number and a sore head.
>
>But now I also suspect that the Apache suexec module won't work either, so 
>don't think I'll go down that path, perhaps ssh will be more successful.

So, as long as you are hacking a license manager, I could suggest
strace/ltrace the license manager to see how it is working stuff out
and then possibly an evil LD_PRELOAD to trick it... of course this is
quite evil.

This is something you shouldn't look at: 
http://whydontyoublogaboutit.com/item/348

Benno
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to