----- Original Message -----
From: Naren Devaiah <[EMAIL PROTECTED]>
Sent: Tuesday, May 22, 2001 12:25 AM
.pdx.edu>
> > > You made the script g+s and made Tom the group owner... So when the
script
> > > runs, it will run under uid of Tom and gid of Tom. Does the problem
become
> > > obvious now?
> >
> > No !!!??, the script has been given +s execution stamp, so the effective
uid
> > during execution is that of the super user...
> No. that is not correct. Just setting the group +s does not make the
> script run as root.
>
> >From the Secure Programming for Linux and Unix HOWTO
> <snip>
> Many Unix-like systems, in particular Linux, simply ignore the setuid and
> setgid bits on scripts to avoid the race condition
> described earlier.....
> </snip>
>
> For a script to run as root, the file has to be owned by root and must be
> setuid.
>
> And as per above snippet that might not happen for scripts!
Uh OOH !! The above works fine on SCO Machines...
But Thank's for the tip, Gotta RTFM...
Bye
K
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/linux-india-help
