Thanks for the help everyone. 

I've got a little test working alright, so I think I'll suid the
makedatprog, and write a little wrapper script to check for a safe
environment, etc. 

Im planning on building a toolkit of little programs to handle creation of
mail directories/.courier files, and also to modify the SQL
database.  Eventually the plan is to write a larger program that will use
the toolkit to control all aspects of my virtual hosts.

Regular readers may remember a posting regarding a web-based Courier Admin
program... well, time commitments have forced me to reconsider, but
hopefully this set of CLI tools will be the beginings of something bigger.

Bryan.

On Wed, 2 Jan 2002, Alessandro Vesely wrote:

> Sam Varshavchik writes:
> > Bryan Ross writes: 
> > 
> > > /usr/lib/courier/sbin/makehosteddomains is owned by courier.admin and has
> > > been chmod'd u+s.
> > 
> > makehosteddomains is a script, not a binary executable.  setuserid bit has 
> > no effect on scripts. 
> > 
> 
> Hmmm... sometimes if a script starts with "#!/bin/sh -p"
> one can get much of the effect the setuid bit should do.
> 
> However, I wouldn't recommend using setuid scripts to set
> permissions, because a wrapper script is more secure and
> more maintainable.
> 
> Ciao
> Ale
> 
> _______________________________________________
> courier-users mailing list
> [EMAIL PROTECTED]
> Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
> 

+-----                      -++-                      -----+
| Bryan Ross                           <[EMAIL PROTECTED]> |
+----------------------------------------------------------+
|Artificial intelligence is no match for natural stupidity.|
+----------------------------------------------------------+
|                            http://www.return0.net/bryan/ |
+-----                      -++-                      -----+


_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to