Path: utzoo!attcan!uunet!mcsun!ukc!mucs!els!dente
From: dente@els.ee.man.ac.uk (Colin Dente)
Newsgroups: comp.sys.apollo
Subject: Re: suid_exec
Message-ID: <1749@m1.cs.man.ac.uk>
Date: 28 Sep 90 15:13:58 GMT
References: <2052@apctrc.UUCP>
Sender: news@cs.man.ac.uk
Organization: Manchester Computer Centre, University of Manchester UK
Lines: 18

In article <2052@apctrc.UUCP> zrde05@master.trc.amoco.com (Ess) writes:
>After receiving the patch from HP/Apollo for the suid_exec security problem,
>one problem still comes to mind. (At least, to _my_ mind). What ever was
>the purpose of this little jewel?

suid_exec is (or should have been) the 'agent' that the Korn shell (ksh) uses
to execute s[ug]id scripts.  How the hell it was so badly cocked up as
to do what it did I'll never know... ;-(

Colin



--
  Colin Dente                     | JANET: dente@uk.ac.man.ee.els
  Manchester Computing Centre     | ARPA:  dente@els.ee.man.ac.uk 
  University of Manchester, UK    | UUCP:  ...!mcsun!ukc!manchester!dente 
                 ... I am the one you warned me of ...