Sandor Strohmayer <sstrohma...@linuxcourseware.com> wrote:

> I may not understand the objective, but placing suid permissions on a script
> is not  a safe practice and would not be allowed in any secure installation.

It doesn't really matter either way on Linux since the SUID bit on
scripts is ignored, anyway.

Other Unix variants do have methods that render SUID scripts secure (by
avoiding the race condition between the kernel and the shell/script
interpreter opening the script file that constitutes the obvious
security hole), and it might be worth pointing out that this doesn't
work on Linux, for the benefit of people who transition to Linux from
those other Unix variants.

Anselm
-- 
Anselm Lingnau ... Linup Front GmbH ... Linux-, Open-Source- & Netz-Schulungen
anselm.ling...@linupfront.de, +49(0)6151-9067-103, Fax -299, www.linupfront.de
Linup Front GmbH, Postfach 100121, 64201 Darmstadt, Germany
Sitz: Weiterstadt (AG Darmstadt, HRB7705), Geschäftsführer: Oliver Michel
_______________________________________________
lpi-examdev mailing list
lpi-examdev@lpi.org
http://list.lpi.org/cgi-bin/mailman/listinfo/lpi-examdev

Reply via email to