Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!samsung!uunet!cbmvax!ag From: ag@cbmvax.commodore.com (Keith Gabryelski) Newsgroups: comp.unix.wizards Subject: Re: setuid? Message-ID: <11440@cbmvax.commodore.com> Date: 8 May 90 20:42:09 GMT References: <11410@cbmvax.commodore.com> <3320@auspex.auspex.com> Reply-To: ag@cbmvax (Keith Gabryelski) Organization: Commodore-Amiga Unix; West Chester, PA Lines: 18 In article <3320@auspex.auspex.com> guy@auspex.auspex.com (Guy Harris) writes: >In article <11410@cbmvax.commodore.com> I wrote: >>This didn't answer Mr. Rae's question nor was it in the least >>constructive since on System V [*1] a shell script can not be setuid; > >Eh? When last I saw S5R4 it *did* support set-uid shell scripts, and >used the "/dev/fd/N" hack to get around at least one of the known >security holes. My mistake--a correction: System V Release 4.0 does support set-uid shell scripts if the !# notion is used. I've tried this with the bourne and korn shells. Pax, Keith -- Support code for SVVS: {int fd=open("/dev/zero",0);mmap(0,0x800,1,0x11,fd,0);close(fd);} Keith Gabryelski ag@amix.commodore.com