Mailinglist Archive: opensuse (1983 mails)
| < Previous | Next > |
Re: [SuSE Linux] Bash and suid
- From: k01164@xxxxxxxxx (Ole Kofoed Hansen)
- Date: Fri, 11 Dec 1998 19:58:46 +0000
- Message-id: <Pine.PMDF.3.95.981211195532.94520B-100000@xxxxxxxxxxxx>
On Fri, 11 Dec 1998, alexm wrote:
> Hi,
>
> On Thu, 10 Dec 1998, root wrote:
> > I set up a script which basically do the following:
> > #! /bin/bash
> > cp /secret_dir/file_secret /public_dir/file_not_secret
> > # end of the script
> >
> > In this way a user with no privileges can have the file_secret copied in his
> > directory (I know it sound strange but it's exactly what I want).
> > How can I convince bash to have the proper right to access secret_dir and do
> > what I want? I thought that setting suid bit would have worked but bash inherit
> > the rights of the user who execute the program (i.e. the user with no
> > privileges which in my case are not enough).
>
> you can set suid on cp ;-)
Don't even say this for fun! :-)
Someone might actually do it.
Ole
-
To get out of this list, please send email to majordomo@xxxxxxxx with
this text in its body: unsubscribe suse-linux-e
Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the
archiv at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
| < Previous | Next > |