[13224] in bugtraq

home help back first fref pref prev next nref lref last post

Re: irix-soundplayer.sh

daemon@ATHENA.MIT.EDU (Darren Reed)
Tue Jan 4 23:41:42 2000

Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id:  <200001050058.LAA27924@cairo.anu.edu.au>
Date:         Wed, 5 Jan 2000 11:58:55 +1100
Reply-To: Darren Reed <avalon@COOMBS.ANU.EDU.AU>
From: Darren Reed <avalon@COOMBS.ANU.EDU.AU>
X-To:         pda@ING.PUC.CL
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To:  <200001041821.PAA31683@ing.puc.cl> from "pda@ING.PUC.CL" at Jan
              05, 2000 08:58:00 AM

In some mail from pda@ING.PUC.CL, sie said:
>
> > midikeys might not setuid these days but you get the idea...
>
> Worked fine on Irix 6.4 here... although i had to change csh to sh for some
> reason... csh returned permission denied, 4755 and all. I assume the fix is to
> take out the suid bit?

Your problem here is that various csh's won't run setuid-root scripts unless
you specify (I think) the -b flag.  From the Solaris csh man page:

...
     -b        Force a "break" from option processing. Subsequent
               command  line  arguments  are not interpreted as C
               shell options. This allows the passing of  options
               to  a script without confusion. The shell does not
               run set-user-ID  or  set-group-ID  scripts  unless
               this option is present.
...

then again, maybe it was done deliberately to foil script kiddies ;)

Darren

home help back first fref pref prev next nref lref last post