Dear Ken,

I was not totaly shore how to use what had written, but atempted make some
uses of it and hear is what I cam up with;

when I run testsuid from a root termnal I get
uid=0(root) gid=0(root)
groups=0(root),1(bin),2(deamon),3(sys),4(adm),6(disk),10(wheel)
context=root:system_r::unconfined_t

when I ran testsuid from my purl scrip over a brower I get.
uid=48(apache) gid=48(apache) groups=48(apache)
context=user_u:system_r:httpd_sys_script_t

I have not gone any firther

Nonlin


----- Original Message ----- 
From: "Ingo Schwarze" <ischwarze@[...].com> 
To: <perl-unix-users@[...].com> 
Sent: Tuesday, November 03, 2009 11:20 AM
Subject: Re: [Perl-unix-users] Permistion Problem when run from the Web


Hi Ken,

Kenneth Ölwing wrote on Tue, Nov 03, 2009 at 04:51:27PM +0100:

>  Just as an aside - isn't it true that many/most/all (???) Unix/Linux
>  installs are set to disallow setuid *scripts*.

 $ cd /usr
 $ sudo sh -c 'echo "#!/bin/sh\nid" >  testsuid'
 $ sudo chown root:wheel testsuid
 $ sudo chmod 4550 testsuid
 $ ./testsuid
uid=1041(ischwarze) euid=0(root) gid=10(users) groups=10(users), 0(wheel)
 $ id
uid=1041(ischwarze) gid=10(users) groups=10(users), 0(wheel)
 $ uname -a
OpenBSD ischwarze00.intranet.astaro.de 4.6 GENERIC#160 i386
 $ sudo rm testsuid

But that doesn't say you should use it.

Besides, your WWW data partition is hopefully mounted nosuid.

Yours,
  Ingo
_______________________________________________
Perl-Unix-Users mailing list
Perl-Unix-Users@[...].com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

_______________________________________________
Perl-Unix-Users mailing list
Perl-Unix-Users@[...].com
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs