From owner-freebsd-questions@FreeBSD.ORG Thu May 12 14:57:01 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 177F0106566B for ; Thu, 12 May 2011 14:57:01 +0000 (UTC) (envelope-from jerrymc@gizmo.acns.msu.edu) Received: from gizmo.acns.msu.edu (gizmo.acns.msu.edu [35.8.1.43]) by mx1.freebsd.org (Postfix) with ESMTP id D2C468FC1B for ; Thu, 12 May 2011 14:57:00 +0000 (UTC) Received: from gizmo.acns.msu.edu (localhost [127.0.0.1]) by gizmo.acns.msu.edu (8.13.6/8.13.6) with ESMTP id p4CErk1B048620; Thu, 12 May 2011 10:53:46 -0400 (EDT) (envelope-from jerrymc@gizmo.acns.msu.edu) Received: (from jerrymc@localhost) by gizmo.acns.msu.edu (8.13.6/8.13.6/Submit) id p4CErkq2048619; Thu, 12 May 2011 10:53:46 -0400 (EDT) (envelope-from jerrymc) Date: Thu, 12 May 2011 10:53:46 -0400 From: Jerry McAllister To: Chris Telting Message-ID: <20110512145346.GA48504@gizmo.acns.msu.edu> References: <4DC9DE2C.6070605@telting.org> <20110511141420.GD41080@gizmo.acns.msu.edu> <4DCBEB1E.6090209@telting.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4DCBEB1E.6090209@telting.org> User-Agent: Mutt/1.4.2.2i Cc: Jerry McAllister , freebsd-questions@freebsd.org Subject: Re: Established method to enable suid scripts? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 May 2011 14:57:01 -0000 On Thu, May 12, 2011 at 07:13:50AM -0700, Chris Telting wrote: > On 05/11/2011 07:14, Jerry McAllister wrote: > >On Tue, May 10, 2011 at 05:54:04PM -0700, Chris Telting wrote: > > > >>I've googled for over an hour. > >> > >>I'm not looking to get into a discussion on security or previous bugs > >>that are currently fixed. Suid in and of itself is a security issue. > >>But if you are using suid it it should work; I don't want to use a > >>kludge and I don't want to use sudo. I'm hoping it's a setting that is > >>just disabled by default. > >My understanding is that in general the system does not allow SUID > >on scripts. The way I have gotten around that (a long time ago) > >was to create a small binary that exec's the script and making > >the binary SUID. > > > > Well it's all hacks and in my not so humble option like chasing your > tail. The assumption is that if someone creates an executable > (assumption is programming is C) they are more credible not to make > mistakes. That's a fallacy and just plain nuts. And I'm an interpreted > language snob saying that. Suid is either allowable or not and should > be a sysctl and apply equally to binaries and scripts. Yet another > thing to add to my project list. Anyone know of an established patch > for fix this freebsd issue or am I yet again going to have to create my own? Guess you will have to do your own. It's not a problem for the rest of us. ////jerry > > Either way thank you all again for your feedback. >