Re: Some ideas for the kernel wishlist

H. Peter Anvin (hpa@transmeta.com)
7 Apr 1998 00:20:20 GMT

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Brian Gerst: "Can't we all just get along? (Re: GGI/fbcon/X flamewar)"
Previous message: H. Peter Anvin: "Re: SUMMARY: GGI/X : the other way??"
Maybe in reply to: marekm@i17linuxb.ists.pwr.wroc.pl: "Some ideas for the kernel wishlist"

Followup to: <C12565DF.0002520F.00@do-notes01.ExperTeam.de>
By author: Roderich Schupp <rsch@ExperTeam.de>
In newsgroup: linux.dev.kernel
>
> hpa@transmeta.com said:
> > The Linux kernel is doing exactly the right thing (honouring the
> > setuid bit on the interpreter, not on the script itself.) If the
> > interpreter is equipped to handle setuid scripts, it can securely
> > fstat() and setuid(). Perl does this, for example. bash doesn't,
> > because bash isn't equipped to handle setuid scripts securely.
> What do you mean - that I should have a setuid-root perl lying around?
>

Look for /usr/bin/suidperl on your system.

-hpa

-- 
    PGP: 2047/2A960705 BA 03 D3 2C 14 A8 A8 BD  1E DF FE 69 EE 35 BD 74
    See http://www.zytor.com/~hpa/ for web page and full PGP public key
        I am Bahá'í -- ask me about it or see http://www.bahai.org/
   "To love another person is to see the face of God." -- Les Misérables

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

Next message: Brian Gerst: "Can't we all just get along? (Re: GGI/fbcon/X flamewar)"
Previous message: H. Peter Anvin: "Re: SUMMARY: GGI/X : the other way??"
Maybe in reply to: marekm@i17linuxb.ists.pwr.wroc.pl: "Some ideas for the kernel wishlist"