From: tomas@fabula.de
Cc: guile-user@gnu.org
Subject: Re: Guile scripts and setuid bit -> trouble
Date: Tue, 11 Jan 2005 10:06:42 +0100 [thread overview]
Message-ID: <20050111090642.GA19962@www> (raw)
In-Reply-To: <opcbrbwkf17.fsf@kanaha.am.mot.com>
[-- Attachment #1.1: Type: text/plain, Size: 684 bytes --]
On Mon, Jan 10, 2005 at 04:03:48PM -0800, Roland Besserer wrote:
>
> Naturally, I'm aware of the inherent security issues [...]
Of course. I wasn't questioning that.
What I was musing about was that maybe Solaris is doing some
dirty tricks to make the suid script (somewhat more) secure.
One of the possible approaches seems to be to pass the already-open
file descriptor to the interpreter -- maybe the interpreter (guile
in this case) doesn't `see' the first couple-of-lines of the
file? Solaris forgetting to rewind the file? Don't know.
But maybe... after all you might be better off with a wrapper
setuid (sudo or something custom-built)?
Regards
-- tomás
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 140 bytes --]
_______________________________________________
Guile-user mailing list
Guile-user@gnu.org
http://lists.gnu.org/mailman/listinfo/guile-user
next prev parent reply other threads:[~2005-01-11 9:06 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-01-07 0:26 Guile scripts and setuid bit -> trouble Roland Besserer
2005-01-08 2:08 ` Andy Wingo
2005-01-09 7:11 ` Paul Jarc
2005-01-10 8:16 ` tomas
2005-01-11 0:03 ` Roland Besserer
2005-01-11 9:06 ` tomas [this message]
2005-01-12 0:48 ` Kevin Ryde
2005-01-11 1:08 ` Roland Besserer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/guile/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20050111090642.GA19962@www \
--to=tomas@fabula.de \
--cc=guile-user@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).