From owner-freebsd-hackers@FreeBSD.ORG  Thu Apr  6 19:44:10 2006
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: freebsd-hackers@freebsd.org
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 319F216A418
	for <freebsd-hackers@freebsd.org>; Thu,  6 Apr 2006 19:44:10 +0000 (UTC)
	(envelope-from lists@sply.org)
Received: from inc.ru (mail6.net.incru.net [62.205.161.39])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4422F43EFF
	for <freebsd-hackers@freebsd.org>; Thu,  6 Apr 2006 19:42:26 +0000 (GMT)
	(envelope-from lists@sply.org)
Received: from [62.205.161.39] (account lists@sply.org)
	by inc.ru (CommuniGate Pro WebUser 4.1.8)
	with HTTP id 5280144; Thu, 06 Apr 2006 23:40:15 +0400
From: lists@sply.org
To: Peter Jeremy <peterjeremy@optushome.com.au>
X-Mailer: CommuniGate Pro WebUser Interface v.4.1.8
Date: Thu, 06 Apr 2006 23:40:15 +0400
Message-ID: <web-5280144@inc.ru>
In-Reply-To: <20060406190004.GD700@turion.vk2pj.dyndns.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="KOI8-R"
Content-Transfer-Encoding: 8bit
Cc: freebsd-hackers@freebsd.org
Subject: Re: setuid scripts wrapper (RFC, proposal)
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Apr 2006 19:44:11 -0000

> You should be able to get around this by opening the script
> first, using fstatfs() and fstat() and passing the script as /dev/fd/N to
> the interpreter.

Great idea. Thank you very much.


> What I was actually referring to was your use of argv[1], argv[2], argv[3]
> and argv[4] without checking argc or otherwise validating them.

Oops, I did it.