lkml.org 
[lkml]   [2000]   [Jan]   [21]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
DateThu, 20 Jan 2000 15:58:26 +0100
FromHelge Hafting <>
SubjectRe: Suid Shell Scripts
> what is the downside to allowing suid/guid ONLY to a **non root/privileged 
> user/group** for shell scripts?

Exactly the same downside as with suid/guid to root shell scripts:

An exploit is possible where someone can gain that userid
running something other than the shell script. Such
as a generic shell.

If you need this - use the trivial workaround:

A short c program that runs that particular shell script, and passes
parameters on to it. compile it and make it setuid.
There should be some safety checks in that program, such as verifying
the script.

Helge Hafting

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:56    [from the cache]
©2003-2009