Difference between revisions of "Setuid wrapper"

From WA2IAC Wiki
Jump to: navigation, search
(Notes on Creating a setuid Wrapper)
(Template for a Bad Idea: SETUID Wrapper)
 
Line 1: Line 1:
Occasionally, or, OK, sometimes frequently, it's necessary to reliably setuid a script when this is otherwise prohibited. When that happens, write a wrapper. Note that the security issues surrounding this are NOT discussed here. This article assumes you are not a n00b, and that you understand fully the security issues and implications. This article also assumes you already know about suid, creating C executables, and so on. It's best NOT to make this a general purpose tool so as to not create yet another way for the NSA to get into your computer...
+
Occasionally, or, OK, sometimes frequently, it's necessary to reliably setuid a script when this is otherwise prohibited. When that happens, write a wrapper. Note that the security issues surrounding this are NOT discussed here. This article assumes you are not a n00b, and that you understand fully the security issues and implications. This article also assumes you already know about suid, creating C executables, and so on. It's best NOT to make this a general purpose tool so as to not create yet another way for the NSA (or other unauthorized entity) to get into your computer and become root... that's just one example of the errors in judgment that can be made with this info. Kids, don't try this at home.
  
 
1. Create your script.
 
1. Create your script.

Latest revision as of 18:17, 21 May 2015