show me

[kai at uicsrd.csrd.uiuc.edu]

I've seen talk about how unsafe setuid shell scripts are, but haven't ever
seen any examples that prove this.  Would someone please explain to me know
why, as a system administrator, I shouldn't ever use setuid/setgid shell
scripts?

Are these problems specific to particular versions of UNIX, or particular
shell types (sh, csh, ksh, perl) or version of those shells?

	Thanks,

	Patrick Wolfe
	pwolfe at kai.com
	kailand!pwolfe