[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: kexpress better than krn?
>
> On Tue, 12 Oct 1999, Kevin Forge wrote:
>
> > If you are insane enogh
> > to make something suid root then do that for a script like "fetchmynews"
> > and have KPPP execute that on conect ( no nead for entering a password
> > each time ). Of course the script wold just say
> >
> > fetchnews
>
> Last I checked linux didn't let you use suid scripts.
>
Ans it will never let you use suid scripts: this feature was disabled
on purpose by the kernels guys: setuid scripts are too easy to make
into security holes either by use of environment variables or by using
symlinks in order to exploit an inherent race condition in #!
scripts.
--
Jean Francois Martinez
Project Independence: Linux for the Masses
http://www.independence.seul.org