Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!cs.utexas.edu!uunet!mcsun!hp4nl!star.cs.vu.nl!gpvos From: gpvos@cs.vu.nl (Gerben 'P' Vos) Newsgroups: comp.os.minix Subject: Re: executable scripts?, and retraction of bovine exhaust Message-ID: <9851@star.cs.vu.nl> Date: 6 May 91 11:29:50 GMT References: <52579@nigel.ee.udel.edu> Sender: news@cs.vu.nl Lines: 15 wjb%cogsci.COG.JHU.EDU@vm1.nodak.edu writes: >Caveat: Their would be one major difference between shell based and kernel >based handling of "#!". If it is in the kernel, you can have setuid >scripts. Such scripts are now frowned upon by many people as it is very >difficult to make standard shell scripts truly secure against crackers. >Some intepreters (like perl?) though can apparently handle this properly. No, but perl warns you and refuses to execute the script if you haven't disabled setuid #! scripts in the (BSD) kernel. How it can check for that is beyond my understanding (maybe it's in the configure script?). . . . . . . . . . . . . . . . . . . . . . . . . . . . G e r b e n V o s <>< Aconet: BIGBEN!Gerben Vos Internet: gpvos@cs.vu.nl R.I.P. Radio Canada International 1942-1991