Re: Some ideas for the kernel wishlist

Roderich Schupp (rsch@ExperTeam.de)
Tue, 7 Apr 1998 01:08:42 +0200


hpa@transmeta.com said:
> The Linux kernel is doing exactly the right thing (honouring the
> setuid bit on the interpreter, not on the script itself.) If the
> interpreter is equipped to handle setuid scripts, it can securely
> fstat() and setuid(). Perl does this, for example. bash doesn't,
> because bash isn't equipped to handle setuid scripts securely.
What do you mean - that I should have a setuid-root perl lying around?

hpa@transmeta.com said:
>> several places). In fact, there can be at most one argument to the
>> interpreter. If someone had described this limits to me and asked me
> That's because it's up to the interpreter to break up the argument
> string.
Just for kicks: could you name an interpreter that does that?
Cheers, Roderich

--
                "A man, a plan, a canal, Panama!"
Roderich Schupp          mailto:rsch@ExperTeam.de
ExperTeam GmbH           http://www.experteam.de/
Munich, Germany               linux:2.1.92

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu