Subject: Re: SetUID scripts.
To: Erik Johannessen <erik@docunetworks.com>
From: Luke Mewburn <lukem@telstra.com.au>
List: current-users
Date: 01/03/1996 12:57:04
Erik Johannessen writes:
> What do I need to do to be able to SetUID scripts?
> Is there a kernel option that has to be set to allow this?
Yep,
options SETUIDSCRIPTS
You may also need
options FDESC
and have an entry in /etc/fstab like:
fdesc /dev fdesc rw,union 0 0
This worked the last time I played with setuid scripts - about 6
months ago.
This enables the script to be run from /dev/fd/0 instead of stdin -
which stops the IFS spoofing attacks.