Re: Secure scripts variables

2005-03-31 Thread Paul Rubin
Florian Lindner <[EMAIL PROTECTED]> writes: > AFAIK scripts can't be setuid? Can you tell me what you mean and how to do > it? Actually it looks like Linux doesn't support setuid scripts. I thought the feature had been restored. There is a well-known security hole but there are workarounds for i

Re: Secure scripts variables

2005-03-30 Thread Florian Lindner
Paul Rubin wrote: > Florian Lindner <[EMAIL PROTECTED]> writes: >> I have a script which is readable and executable by a user, but not >> writable. >> The users executes the scripts, it reads in a value and based on this >> value it computes a result and stores it in a variable. >> Can the user re

Re: Secure scripts variables

2005-03-30 Thread Paul Rubin
Florian Lindner <[EMAIL PROTECTED]> writes: > I have a script which is readable and executable by a user, but not > writable. > The users executes the scripts, it reads in a value and based on this value > it computes a result and stores it in a variable. > Can the user read out the value of this v

Re: Secure scripts variables

2005-03-29 Thread Serge Orlov
Florian Lindner wrote: > Hello, > given the following situation: > > I have a script which is readable and executable by a user, but not > writable. > The users executes the scripts, it reads in a value and based on this > value it computes a result and stores it in a variable. > Can the user read

Secure scripts variables

2005-03-29 Thread Florian Lindner
Hello, given the following situation: I have a script which is readable and executable by a user, but not writable. The users executes the scripts, it reads in a value and based on this value it computes a result and stores it in a variable. Can the user read out the value of this variable? If yes