Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!mips!apple!agate!usenet.ins.cwru.edu!eagle!bones!fsfrick
From: fsfrick@bones.lerc.nasa.gov (David Fricker)
Newsgroups: comp.unix.aix
Subject: bsh & ksh running setuid
Message-ID: <1991Apr29.132514.8361@eagle.lerc.nasa.gov>
Date: 29 Apr 91 13:25:14 GMT
Sender: news@eagle.lerc.nasa.gov
Reply-To: fsfrick@bones.lerc.nasa.gov (David Fricker)
Organization: NASA/Lewis Research Center, Cleveland
Lines: 15

FYI: under AIXv3.1 release 3003, bsh & ksh do NOT ignore the
setuid bits when running a script.  The documentation (InfoExplorer)
says that bsh, ksh, & csh all ignore the setuid bits when they
run a script.  I called IBM Software Defect Support about this and
they confirmed that this is a bug.  They also said that it is fixed
under release 3005.

So, if you want scripts to run setuid and you have release 3003, you
may want to save a copy of the bsh & ksh binaries.

--
-----------------------------------------------------------------------------
David Fricker			|     phone: 216-433-5960
NASA Lewis Research Center     	|     M.S. 5-11
Cleveland, Ohio  44135         	|     email: fsfrick@bones.lerc.nasa.gov