suid doesn't work
    prl at eiger.uucp 
    prl at eiger.uucp
       
    Wed Feb  1 06:25:46 AEST 1989
    
    
  
But DON'T actually do this [[ setuid shells ]] if you want to keep your
system in any way secure. There is a kernel bug (in all Unixes with the #!
feature, not just SunOS) which allows set-uid shell scripts to be tricked
into allowing *any* commands to be executed setuid in place of the shell
script!!
	DON'T DO IT!! See Maarten Litmaath's posting in
	comp.sources.misc v05i097 for a probably secure way
	of doing what you want.
I am surprised that wnl didn't warn about this problem.
[[ Wnl didn't warn about this problem because wnl wasn't aware of it.
Unfortunately, I don't have the time to ingest all the information (and
weed out the noise) that the net produces.  Thank you for bringing it to
everyone's attention.  --wnl ]]
-- 
Peter Lamb
uucp:  uunet!mcvax!ethz!prl	eunet: prl at ethz.uucp	Tel:   +411 256 5241
Integrated Systems Laboratory
ETH-Zentrum, 8092 Zurich
    
    
More information about the Comp.sys.sun
mailing list