[95109] in RedHat Linux List
Re: trouble with suid cgi script
daemon@ATHENA.MIT.EDU (Benjamin de los Angeles Jr.)
Thu Oct 15 07:15:20 1998
Date: Thu, 15 Oct 1998 19:25:04 +0800 (CST)
From: "Benjamin de los Angeles Jr." <bench@boracay.surfshop.net.ph>
To: redhat-list@redhat.com
cc: "redhat-list@redhat.com"@Landmark.COM
In-Reply-To: <199810141431.KAA18523@fw.landmark.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Have you tried using #!/usr/bin/suidperl ?
On Wed, 14 Oct 1998, Charles Galpin wrote:
> I can't get my suid perl script to work. My kernal doesn't allow suid
> scripts, so I used a wrapper
>
> /* wrapper.c */
> #include <unistd.h>
>
> void main () {
>
> execl("/usr/bin/perl","testmail","/home/cgalpin/html/cgi-bin/testmail",NULL)
> ;
> }
>
> compiled into exe called 'mail'
> -rwsrwsr-x 1 root root 4194 Oct 14 10:17 mail
>
> when run as nobody I still get
> Insecure $ENV{PATH} while running setuid at
> /home/cgalpin/html/cgi-bin/testmail line 18.
>
> from the perl script ( and a 500 from the webserver when run that way)
>
> anyone see what I'm doing wrong. I'm using
> http://www.perl.com/CPAN-local/doc/FAQs/cgi/wwwsf5.html#Q49
> as a source of info for this
>
> thanks
>
> --
> Charles Galpin <cgalpin@lighthouse-software.com>
>
>
> --
> PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
> http://www.redhat.com http://archive.redhat.com
> To unsubscribe: mail redhat-list-request@redhat.com with
> "unsubscribe" as the Subject.
>
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
