On 2/21/07, Gsandtner Michael <[EMAIL PROTECTED]> wrote:
system("/home/foo/nosuid-example arg");
system("/home/foo/nosuid-example \"arg\"");
The difference between these two is that the first runs the example
program, but the second runs a shell and asks it to run the example
program.
When yo
I have a problem with setuid script. I have tracked down to the
following example.
A perl script is setuid, calls another, not setuid script with system.
If the argument contain a quote, setuid is not performed, otherwise it
is set.
cd /home/foo
cat >suid-example <<'_end'
#!/usr/bin/perl
print STD
