[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kexpress better than krn?



> 
> On Tue, 12 Oct 1999, Kevin Forge wrote:
> 
> > If you are insane enogh 
> > to make something suid root then do that for a script like "fetchmynews"
> > and have KPPP execute that on conect ( no nead for entering a password
> > each time ).  Of course the script wold just say
> > 
> > fetchnews
> 
> Last I checked linux didn't let you use suid scripts.
> 

Ans it will never let you use suid scripts: this feature was disabled
on purpose by the kernels guys: setuid scripts are too easy to make
into security holes either by use of environment variables or by using
symlinks in order to exploit an inherent race condition in #!
scripts.

-- 
			Jean Francois Martinez

Project Independence: Linux for the Masses
http://www.independence.seul.org