Gentoo Archives: gentoo-user

From: Dirk Heinrichs <ext-dirk.heinrichs@×××××.com>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Why can a perl script be executed suid root?
Date: Mon, 26 Feb 2007 09:16:45
Message-Id: 200702261011.05782.ext-dirk.heinrichs@nokia.com
1 Hi,
2
3 even if I rename suidperl, I can execute the following suid-root perl script
4 as normal user and get two different uids (as expected, from a suid-root
5 script).
6
7 #!/usr/bin/perl
8
9 # print euid
10 print $>."\n";
11 #print uid
12 print $<."\n";
13
14 I would expect that w/o suidperl I'd get the user's uid twice.
15
16 Bye...
17
18 Dirk
19 --
20 Dirk Heinrichs | Tel: +49 (0)162 234 3408
21 Configuration Manager | Fax: +49 (0)211 47068 111
22 Capgemini Deutschland | Mail: dirk.heinrichs@×××××××××.com
23 Hambornerstraße 55 | Web: http://www.capgemini.com
24 D-40472 Düsseldorf | ICQ#: 110037733
25 GPG Public Key C2E467BB | Keyserver: www.keyserver.net