Quick question, is there a good reason why suidperl is setuid root? (Security, probably, but is there a particular exploit that I should be aware of?) -rwxr-xr-x 2 root root 800943 Sep 19 2001 suidperl Perl5.6.1, Suse Linux 7.3 Thanks ..greg -- __@ Greg Franks <| _~@ __O _`\<,_ Ottawa, Ontario, Canada |O\ -^\<;^\<, (*)/ (*) (*)--(*)%---/(*) "Where do you want to go today?" Outside.
On Dec 05, 2002, Greg Franks wrote:
Quick question, is there a good reason why suidperl is setuid root? (Security, probably, but is there a particular exploit that I should be aware of?)
-rwxr-xr-x 2 root root 800943 Sep 19 2001 suidperl
Where do you see that it is setuid root? -- Mads Martin Jørgensen, http://mmj.dk "Why make things difficult, when it is possible to make them cryptic and totally illogic, with just a little bit more effort?" -- A. P. J.
Mads Martin Joergensen wrote:
On Dec 05, 2002, Greg Franks wrote:
Quick question, is there a good reason why suidperl is setuid root? (Security, probably, but is there a particular exploit that I should be aware of?)
-rwxr-xr-x 2 root root 800943 Sep 19 2001 suidperl
Where do you see that it is setuid root?
The permissions you see here are : owner has full access (read,write,execute) group has Read and eXecute acces others have Read and eXecute access. Just because a file is owned by root does not mean it is Suid root. You would see an s in the permissions if it was suid root. Justin -- Justin Davies - Linux Administrator Cinesite Europe Ltd. Project list: http://ming/justin If the designers of X-Windows built cars, there would be no fewer than five steering wheels hidden about the cockpit, none of which followed the same principles -- but you'd be able to shift gears with your car stereo. Useful feature, that. -- Marus J. Ranum, Digital Equipment Corporation
"Greg" == Greg Franks <rgfranks@alumni.uwaterloo.ca> writes:
Greg> Quick question, is there a good reason why suidperl is Greg> setuid root? (Security, probably, but is there a particular Greg> exploit that I should be aware of?) Greg> -rwxr-xr-x 2 root root 800943 Sep 19 2001 suidperl Greg> Perl5.6.1, Suse Linux 7.3 Ooops... is there any good reason why suidperl (which is used to execute suid perl scripts is NOT set uid root (ie. mode 04755)? -- __@ Greg Franks <| _~@ __O _`\<,_ Ottawa, Ontario, Canada |O\ -^\<;^\<, (*)/ (*) (*)--(*)%---/(*) "Where do you want to go today?" Outside.
participants (3)
-
Greg Franks -
Justin Davies -
Mads Martin Joergensen