Mailinglist Archive: opensuse (1983 mails)

< Previous Next >
Re: [SuSE Linux] Bash and suid
  • From: k01164@xxxxxxxxx (Ole Kofoed Hansen)
  • Date: Fri, 11 Dec 1998 19:58:46 +0000
  • Message-id: <Pine.PMDF.3.95.981211195532.94520B-100000@xxxxxxxxxxxx>



On Fri, 11 Dec 1998, alexm wrote:
> Hi,
>
> On Thu, 10 Dec 1998, root wrote:
> > I set up a script which basically do the following:
> > #! /bin/bash
> > cp /secret_dir/file_secret /public_dir/file_not_secret
> > # end of the script
> >
> > In this way a user with no privileges can have the file_secret copied in his
> > directory (I know it sound strange but it's exactly what I want).
> > How can I convince bash to have the proper right to access secret_dir and do
> > what I want? I thought that setting suid bit would have worked but bash inherit
> > the rights of the user who execute the program (i.e. the user with no
> > privileges which in my case are not enough).
>
> you can set suid on cp ;-)

Don't even say this for fun! :-)
Someone might actually do it.

Ole

-
To get out of this list, please send email to majordomo@xxxxxxxx with
this text in its body: unsubscribe suse-linux-e
Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/";><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the
archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html";><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>

< Previous Next >