Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!uunet!mcvax!enea!ttds!draken!zap
From: zap@draken.nada.kth.se (Svante Lindahl)
Newsgroups: comp.unix.wizards
Subject: Re: device file non-protection - and suid scripts
Message-ID: <212@draken.nada.kth.se>
Date: Wed, 14-Oct-87 23:13:29 EDT
Article-I.D.: draken.212
Posted: Wed Oct 14 23:13:29 1987
Date-Received: Sun, 18-Oct-87 08:44:28 EDT
References: <9615@brl-adm.ARPA> <7525@steinmetz.steinmetz.UUCP> <4832@ncoast.UUCP> <30574@sun.uucp>
Reply-To: zap@nada.kth.se (Svante Lindahl)
Organization: The Royal Inst. of Techn., Stockholm
Lines: 15

>> ...please note that it's only BSD and derivatives that have this bug.  The
>> reason?  Non-BSD systems don't _allow_ suid shell scripts.
>
>No, I think Masscomp's system, which I think they claim to be a System V
  ...
>    also supports "#!", and thus probably supports set-UID scripts.

I know of one other company, that I wouln't name, that sells System V
boxes that supports "#!".
This is OK as far as I'm concerned (being a BSD-oriented person), but
they also have scripts on their distribution tape that are setuid to
root... It's been a while now, so maybe they have it fixed in their
current release. This was a V.2.0-release or something such.

Svante Lindahl				zap@nada.kth.se