Re: using wrapsuid

2008-01-10 Thread Tom Phoenix
On Jan 10, 2008 1:22 PM, Tim McGeary <[EMAIL PROTECTED]> wrote: > Gunnar Hjalmarsson wrote: > > Tim McGeary wrote: > >> I have a perl script that runs on the command line that I need run as > >> a CGI on a webserver, but the system commands I'm using in the script > >> require that I run it as a sp

Re: using wrapsuid

2008-01-10 Thread Gunnar Hjalmarsson
Tim McGeary wrote: Gunnar Hjalmarsson wrote: I don't know anything about wrapsuid, but I have successfully controlled the uid or gid of a single script via a C wrapper as described at http://perldoc.perl.org/perlsec.html#Security-Bugs I've heard dubious security issues about using a C wrapper

Re: using wrapsuid

2008-01-10 Thread Tim McGeary
Gunnar Hjalmarsson wrote: Tim McGeary wrote: I have a perl script that runs on the command line that I need run as a CGI on a webserver, but the system commands I'm using in the script require that I run it as a specific user and will not let the webserver user run them. I've been investigat

Re: using wrapsuid

2008-01-10 Thread Gunnar Hjalmarsson
Tim McGeary wrote: I have a perl script that runs on the command line that I need run as a CGI on a webserver, but the system commands I'm using in the script require that I run it as a specific user and will not let the webserver user run them. I've been investigating possibilities like Apac

using wrapsuid

2008-01-10 Thread Tim McGeary
Greetings, I have a perl script that runs on the command line that I need run as a CGI on a webserver, but the system commands I'm using in the script require that I run it as a specific user and will not let the webserver user run them. I've been investigating possibilities like Apache suEX