On Thu, 22 Feb 2001, Shaun Donovan wrote:

> I have tried this and tested it by writing a script that just runs a
> "whoami", but when I run it, it does not run as the other user. I have
> tried setting the setuid bit as well as the setgid, but to no avail.
> What do you mean when you say that only certain programs are tolerant of
> this?
>
The SUID bit does not work on scripts under Linux.  This is not a bug,
but a design choice.  As for some programs not being tolerant of running
SUID, unless a program is designed to be run this way, you can introduce
security problems when setting a program to run as another user.  All
too often, it is possable to gain access as the other user.  Any program
that allows shell access definitly should NOT be run SUID!

Mikkel
  --

    Do not meddle in the affairs of dragons,
 for you are crunchy and taste good with ketchup.



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to