[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: opinion on shell cgi scripts
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Re: opinion on shell cgi scripts
- From: Ben Goren <ben_(_at_)_trumpetpower_(_dot_)_com>
- Date: Mon, 1 Nov 2004 07:01:21 -0700
On 2004 Nov 1, at 4:48 AM, Johan SANCHEZ wrote:
>> You can't make scripts suid, only binaries.
>
> Really ?
Really.
$ id && cat suid-whoami && ls -l suid-whoami && ./suid-whoami
uid=501(ben) gid=501(ben) groups=501(ben), 0(wheel), 5(operator),
9(wsrc), 20(staff), 67(www), 20002(artsed)
#!/bin/sh
id
-rwsr-sr-x 1 nobody nobody 14 Nov 1 06:55 suid-whoami*
uid=501(ben) gid=501(ben) groups=501(ben), 0(wheel), 5(operator),
9(wsrc), 20(staff), 67(www), 20002(artsed)
[demime 0.98d removed an attachment of type application/pgp-signature which had a name of PGP.sig]
Visit your host, monkey.org