I find I can't run setuid perl script
when I do this on a Unix-like platform:
1.Create a file "setuid.pl" :
#!/usr/bin/perl -T
2.chmod a+x setuid.pl
3.chmod u+s setuid.pl
then i try
shell> ./setuid.pl
Permission denied.
hmm...it always come out with this,
and it's not because i don't have execute permission.
The message was sent by perl,
can anyone tell me how should I write a setuid program in perl?
Without a external wrap on it.
Thank you very much.
3  9289 
> The message was sent by perl, can anyone tell me how should I write a setuid program in perl?
Is it maybe that the perl interpreter is not running as root? What are the
exact permissions on the perl script? I would imagine (but haven't verified)
that if the current user has permission to execute the script, that it will
load as that user, and not as root. Perhaps if the permissions are 700 on
the perl script it might force the execution as root.
Just a thought
Dale
Dale Atkin <ne*******@gree nsquare.ca> wrote: The message was sent by perl,
can anyone tell me how should I write a setuid program in perl?
Is it maybe that the perl interpreter is not running as root? What are the
exact permissions on the perl script? I would imagine (but haven't verified)
that if the current user has permission to execute the script, that it will
load as that user, and not as root. Perhaps if the permissions are 700 on
the perl script it might force the execution as root.
Just a thought
Dale
-rwsr-xr-x 1 wchunhao cp 19 Oct 8 00:04 setuid.pl*
I want the program to be run by other people,
and he can be setuid to my uid.
I don't think the owner have to be root since I don't want it to setuid
to root, just setuid to my uid.
How to make it? thank u.
"pasear" <wc******@csie. nctu.edu.tw> wrote in message
news:bl******** **@netnews2.csi e.nctu.edu.tw.. . I find I can't run setuid perl script
when I do this on a Unix-like platform:
1.Create a file "setuid.pl" :
#!/usr/bin/perl -T
2.chmod a+x setuid.pl
3.chmod u+s setuid.pl
then i try
shell> ./setuid.pl
Permission denied.
hmm...it always come out with this,
and it's not because i don't have execute permission.
The message was sent by perl,
can anyone tell me how should I write a setuid program in perl?
Without a external wrap on it.
Thank you very much.
Setuid scripts are very dangerous. I didn't think the operating system even
honored the setuid bit for scripts. Am I mistaken ? Perl gave me loads of
headaches even when I tried to convert the perl script to a binary file
using perl2exe. Even after 'untainting' all of the variables, there were
still many problems. I ended up having to re-write the program in C, which
also happens to be the safest way to run a program as setuid. This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Ben Eisenberg |
last post by:
I'm trying to run a php script setuid. I've tried POSIX_setuid but you have to be root to run this. The files are located on a public access unix system and have me as the owner and nobody as the group. Rather than make them group writable where in anybody could make a script and write to my files i would like to make them setuid. I tried making a c prog with the setuid function. I used chmod and made it setuid. I called it with the system...
|
by: Dave Harrison |
last post by:
hi again,
Im clearly a moron, and have solved the problem myself, due to a wish
to avoid dire embarrasment I shall not reveal the stupid mistake I made ;-)
Apologies for the inconvenience
Dave
> hi all,
>
|
by: Domenico Andreoli |
last post by:
Hi,
I did a little research about execution of Python setuid scripts. I
found only a couple of C wrappers I don't like. So I wrote my own, it is
available at . Feel free to send comments.
2c
http://savannah.nongnu.org/cgi-bin/viewcvs/prua/prua/python-setuid.c
|
by: Michele Simionato |
last post by:
I have a script that sometimes is run by myself (user id 501) and sometimes
by the mailer program as nobody/nogroup (userid 65534). I would like to change
the effective uid to 501 in any case, to get the right permissions, but
os.setuid and os.seteuid give me a OSError No. 1. Is there a way to get what I
want? My requirement is that the script should work indipendently from the
mailer program, i.e I would like to avoid configuring the...
|
by: Rajesh |
last post by:
Can someone provide me a sample C program to set the uid? The requirement is
the batch id 'abatchid' should be the one who can copy a file from foldera
to folderb. But the user who does not have privilege to run this command,
should be able to run the C program, which setuid of the batch id and runs
it. The program should take 2 parameters, one source folder/file and the
second one destination folder/file.
Thanks for your help
| | |
by: vimala |
last post by:
Hi,
I have to write a setuid program which is going to check for
accesslogs based on the real user who had invoked the executable.
I need to get the real and effective user-ids of the system
and based on the real user-id i need to filter logs only for that
user and give it for further activity. My idea was to get the real
userid, groupid and search for a pattern x:userid:groupid in the
/etc/password file. But again that involves fork,...
|
by: Tiago Simões Batista |
last post by:
Hello all
I have a situation that requires that a python script, that is
run from a webpage (via php exec()) must be run with root privileges.
The sysadmin already set the setuid bit on the script, but it
still fails when it tries to write to any file that only root has
write access to.
I read somewhere that any scripts that start with "#!" will no
|
by: Stu |
last post by:
Is there anyway to tell if a setuid() call has been made to some other
user?
If so, can somebody provide me with some sample code
Thanks in advance to all that answer
|
by: thirusvga |
last post by:
please help me...
Hi i want to run a php program using linux command....
php program is stored in /var/www/html/t.php
that program is
<?php
$command='ooffice -invisible "macro:///Standard.Module4.Main()"';
print system($command);
echo"successfully converted";
?>
the above program is run in terminal....
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
| | |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
