Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Nov 2002 01:05:37 -0800 (PST)
From:      Vincent Chen <vctw@yahoo.com>
To:        FreeBSD maillist <freebsd-questions@FreeBSD.ORG>
Subject:   CGI using suidperl question?
Message-ID:  <20021110090537.27379.qmail@web20003.mail.yahoo.com>

next in thread | raw e-mail | index | archive | help
Hi, all

I got to write a CGI to handle network interface on
freebsd. After some tests have done, I found a
possible issue.My apache running as www and my cgi has
suid bit set,it seems that suidperl only set euid, but
real uid still www and some tasks can be done. This is
the output that my CGI call /usr/bin/id:

uid=80(www) euid=0(root) gid=80(www) groups=80(www)

Is it possible to hide real uid www and replace it wit
root?

Thanks,





__________________________________________________
Do you Yahoo!?
U2 on LAUNCH - Exclusive greatest hits videos
http://launch.yahoo.com/u2

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021110090537.27379.qmail>