Messages in this thread | | | From | (H. Peter Anvin) | Subject | Re: Some ideas for the kernel wishlist | Date | 7 Apr 1998 00:20:20 GMT |
| |
Followup to: <C12565DF.0002520F.00@do-notes01.ExperTeam.de> By author: Roderich Schupp <rsch@ExperTeam.de> In newsgroup: linux.dev.kernel > > hpa@transmeta.com said: > > The Linux kernel is doing exactly the right thing (honouring the > > setuid bit on the interpreter, not on the script itself.) If the > > interpreter is equipped to handle setuid scripts, it can securely > > fstat() and setuid(). Perl does this, for example. bash doesn't, > > because bash isn't equipped to handle setuid scripts securely. > What do you mean - that I should have a setuid-root perl lying around? >
Look for /usr/bin/suidperl on your system.
-hpa -- PGP: 2047/2A960705 BA 03 D3 2C 14 A8 A8 BD 1E DF FE 69 EE 35 BD 74 See http://www.zytor.com/~hpa/ for web page and full PGP public key I am Bahá'í -- ask me about it or see http://www.bahai.org/ "To love another person is to see the face of God." -- Les Misérables
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |