From: Richard Jones <rich@annexia.org>
To: Inria Ocaml Mailing List <caml-list@inria.fr>
Subject: Re: [Caml-list] on ocaml and set-user-id programs
Date: Sun, 27 Mar 2005 11:31:27 +0100 [thread overview]
Message-ID: <20050327103126.GA23054@furbychan.cocan.org> (raw)
In-Reply-To: <20050327100145.GA9332@fistandantilus.takhisis.org>
On Sun, Mar 27, 2005 at 12:01:45PM +0200, Stefano Zacchiroli wrote:
> I've wrote an ocaml program that needs to be executed set-user-id root.
>
> I managed to have it being executed with effective user id 0 only
> compiling in native code or in custom bytecode. Both executing it as a
> script using "ocamlrun ocaml" and compiling it to non-custom bytecode
> make the program having effective user id of the user executing it.
> (Example session at the end of this mail)
I think the problem is simply caused because your kernel has setuid
scripts disabled, for security reasons. According to the second
reference below, Linux ignores the setuid and setgid bits on scripts.
http://www.faqs.org/faqs/unix-faq/faq/part4/section-7.html
http://www.linux.com/howtos/Secure-Programs-HOWTO/processes.shtml
Rich.
--
Richard Jones, CTO Merjis Ltd.
Merjis - web marketing and technology - http://merjis.com
Team Notepad - intranets and extranets for business - http://team-notepad.com
next prev parent reply other threads:[~2005-03-27 10:31 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-03-27 10:01 Stefano Zacchiroli
2005-03-27 10:31 ` Richard Jones [this message]
2005-03-27 10:31 ` [Caml-list] " Kim Nguyen
2005-03-27 13:34 ` Stefano Zacchiroli
2005-03-27 15:33 ` Richard Jones
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20050327103126.GA23054@furbychan.cocan.org \
--to=rich@annexia.org \
--cc=caml-list@inria.fr \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).