Re: Secure scripts variables

2005-03-31 Thread Paul Rubin
Florian Lindner [EMAIL PROTECTED] writes: AFAIK scripts can't be setuid? Can you tell me what you mean and how to do it? Actually it looks like Linux doesn't support setuid scripts. I thought the feature had been restored. There is a well-known security hole but there are workarounds for it

Re: Secure scripts variables

2005-03-30 Thread Paul Rubin
Florian Lindner [EMAIL PROTECTED] writes: I have a script which is readable and executable by a user, but not writable. The users executes the scripts, it reads in a value and based on this value it computes a result and stores it in a variable. Can the user read out the value of this

Re: Secure scripts variables

2005-03-30 Thread Florian Lindner
Paul Rubin wrote: Florian Lindner [EMAIL PROTECTED] writes: I have a script which is readable and executable by a user, but not writable. The users executes the scripts, it reads in a value and based on this value it computes a result and stores it in a variable. Can the user read out the

Secure scripts variables

2005-03-29 Thread Florian Lindner
Hello, given the following situation: I have a script which is readable and executable by a user, but not writable. The users executes the scripts, it reads in a value and based on this value it computes a result and stores it in a variable. Can the user read out the value of this variable? If

Re: Secure scripts variables

2005-03-29 Thread Serge Orlov
Florian Lindner wrote: Hello, given the following situation: I have a script which is readable and executable by a user, but not writable. The users executes the scripts, it reads in a value and based on this value it computes a result and stores it in a variable. Can the user read out