Date: Fri, 28 Mar 1997 23:39:01 -0500 (EST) From: Bryan Swann <swann@nosc.mil> To: freebsd-security@freebsd.org Subject: Re: SetUID & Apache in 2.2-RELEASE... Message-ID: <Pine.GSO.3.96.970328233108.18974D-100000@mailbox> In-Reply-To: <199703280618.AAA11018@main.gbdata.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Someone else originally setup a FBSD box that I now administer. It is running 2.1.5 FBSD and Apache 1.2b6. I was attempting to write a PERL suid CGI script as well. I found that the suid script would fail with NO error messages. I also found that a bourne shell suid script would not run either. I assume that suid scripts are not allowed in FBSD. If there is a way to allow suid scripts, please forward the information. BTW, I tried to get the PERL suid emulation working, but I would agree that this doesn't work yet. Although I didn't get any compile errors, the suid script still failed after I tried multiple times to compile the emulation into PERL. __________________________________________________________________________ | Bryan Swann (swann@nosc.mil) 803/974-4267 803/974-5080 (Fax) | | Eagan McAllister Associates, Inc. | | | | "Everything must be working perfectly, cause I don't smell any smoke" | -------------------------------------------------------------------------- On Fri, 28 Mar 1997, Gary Clark II wrote: > Cy Schubert wrote: > > > I used to have some setuids CGIs running with my 2.1.5 fbsdbox, and > > > them executed pretty well with Apache 1.1.1 & Perl 5.002. > > > > > > Now, I upgraded to 2.2-RELEASE, Apache 1.2b7 & Perl 5.003, and none of > > > the setuids cgis run (being executed by anybody but root). When I > > > remove from them the setuid flag, they can be executed (but I need to > > > execute them as setuids). Any Ideas? Thanx in advance... > > > > This is a Perl problem. I've encountered this with other Perl (5.003) > > scripts before, though I don't know what the solution is yet. > > > The problem is that the port does not setup perl to do suid scripts. You > have to enable this in the configure script. > > > > > Cy Schubert Fax: (250)387-5766 > > Gary > > -- > Gary Clark II (N5VMF) | I speak only for myself and "maybe" my company > gclarkii@GBData.COM | Member of the FreeBSD Doc Team > Providing Internet and ISP startups - http://WWW.GBData.com for information > FreeBSD FAQ at ftp://ftp.FreeBSD.ORG/pub/FreeBSD/docs/FAQ.latin1 >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.3.96.970328233108.18974D-100000>