Linux-kernel mailing list archive 2000-23,: Re: [PATCH] config option for suid scripts

# Re: [PATCH] config option for suid scripts

Preston F. Crow Adv94 (Preston.F.Crow.Adv94@Alum.Dartmouth.ORG)
06 Jun 2000 09:19:44 EDT

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Alan Cox: "Re: (reiserfs) Re: New Linux 2.5 - 2.6 TODO (Alan Cox"
- Previous message: Matthew Kirkwood: "Re: (reiserfs) Re: New Linux 2.5 - 2.6 TODO (Alan Cox"
- Maybe in reply to: Preston F. Crow Adv94: "[PATCH] config option for suid scripts"
- Next in thread: Jesse Pollard: "Re: [PATCH] config option for suid scripts"

Jesse Pollard:
>I hope this doesn't get into the kernel. This weakness is very very bad.

That's why I made it a config option. In most cases, people won't
turn it on; distributions certainly won't turn it on. However, for
very limited situations, it can be quite useful.

In my case, we were switching from Solaris to Linux, and Solaris allowed
suid scripts. We used a bunch of them, so all that had to be fixed before
the Linux version could run. With suid scripts, it would have run
immediately, and we could have fixed the security later.

And while it's probably foolish, we don't really care much about security
inside the firewall. All the stuff we care about is on NFS, anyway, so
there's not any real hope of security to begin with.

I hope this does make it into the kernel. Most people will just leave
it off.

--PC

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

- Next message: Alan Cox: "Re: (reiserfs) Re: New Linux 2.5 - 2.6 TODO (Alan Cox"
- Previous message: Matthew Kirkwood: "Re: (reiserfs) Re: New Linux 2.5 - 2.6 TODO (Alan Cox"
- Maybe in reply to: Preston F. Crow Adv94: "[PATCH] config option for suid scripts"
- Next in thread: Jesse Pollard: "Re: [PATCH] config option for suid scripts"