Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 May 2011 21:43:43 -0400
From:      Daniel Staal <DStaal@usa.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: Established method to enable suid scripts?
Message-ID:  <58DB9F20CBF1C01E9468FCEA@mac-pro.magehandbook.com>
In-Reply-To: <4DC9DE2C.6070605@telting.org>
References:  <4DC9DE2C.6070605@telting.org>

next in thread | previous in thread | raw e-mail | index | archive | help
--As of May 10, 2011 5:54:04 PM -0700, Chris Telting is alleged to have 
said:

> I've googled for over an hour.
>
> I'm not looking to get into a discussion on security or previous bugs
> that are currently fixed.  Suid in and of itself is a security issue.
> But if you are using suid it it should work; I don't want to use a kludge
> and I don't want to use sudo.  I'm hoping it's a setting that is just
> disabled by default.

--As for the rest, it is mine.

It should just work, in most cases.  (I think there are a couple of base 
programs that _require_ being suid to work.  Otherwise you wouldn't be able 
to log in to a box...)

One thought: What's the output of 'mount' for the slice you are trying to 
run this script from?  (Suid can be blocked on a per-mountpoint basis.)

Daniel T. Staal

---------------------------------------------------------------
This email copyright the author.  Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes.  This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---------------------------------------------------------------



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?58DB9F20CBF1C01E9468FCEA>