From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <tuhs-bounces@minnie.tuhs.org>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.0 required=5.0 tests=MAILING_LIST_MULTI,
	RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.2
Received: from minnie.tuhs.org (minnie.tuhs.org [45.79.103.53])
	by inbox.vuxu.org (OpenSMTPD) with ESMTP id 397c4d0b
	for <ml@inbox.vuxu.org>;
	Sun, 4 Aug 2019 07:46:52 +0000 (UTC)
Received: by minnie.tuhs.org (Postfix, from userid 112)
	id B56F79BAFB; Sun,  4 Aug 2019 17:46:51 +1000 (AEST)
Received: from minnie.tuhs.org (localhost [127.0.0.1])
	by minnie.tuhs.org (Postfix) with ESMTP id C7CE79B84E;
	Sun,  4 Aug 2019 17:46:40 +1000 (AEST)
Received: by minnie.tuhs.org (Postfix, from userid 112)
 id 782449B84E; Sun,  4 Aug 2019 17:46:39 +1000 (AEST)
Received: from freefriends.org (freefriends.org [96.88.95.60])
 by minnie.tuhs.org (Postfix) with ESMTPS id 2FB98948F2
 for <tuhs@tuhs.org>; Sun,  4 Aug 2019 17:46:39 +1000 (AEST)
X-Envelope-From: arnold@skeeve.com
Received: from freefriends.org (freefriends.org [96.88.95.60])
 by freefriends.org (8.14.7/8.14.7) with ESMTP id x747kH0c004736
 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); 
 Sun, 4 Aug 2019 01:46:18 -0600
Received: (from arnold@localhost)
 by freefriends.org (8.14.7/8.14.7/Submit) id x747kHsu004735;
 Sun, 4 Aug 2019 01:46:17 -0600
From: arnold@skeeve.com
Message-Id: <201908040746.x747kHsu004735@freefriends.org>
X-Authentication-Warning: frenzy.freefriends.org: arnold set sender to
 arnold@skeeve.com using -f
Date: Sun, 04 Aug 2019 01:46:17 -0600
To: tuhs@tuhs.org, dave@horsfall.org
References: <alpine.BSF.2.21.9999.1908041714460.38830@aneurin.horsfall.org>
In-Reply-To: <alpine.BSF.2.21.9999.1908041714460.38830@aneurin.horsfall.org>
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: [TUHS] Set-uid shell scripts
X-BeenThere: tuhs@minnie.tuhs.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: The Unix Heritage Society mailing list <tuhs.minnie.tuhs.org>
List-Unsubscribe: <https://minnie.tuhs.org/cgi-bin/mailman/options/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=unsubscribe>
List-Archive: <http://minnie.tuhs.org/pipermail/tuhs/>
List-Post: <mailto:tuhs@minnie.tuhs.org>
List-Help: <mailto:tuhs-request@minnie.tuhs.org?subject=help>
List-Subscribe: <https://minnie.tuhs.org/cgi-bin/mailman/listinfo/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=subscribe>
Errors-To: tuhs-bounces@minnie.tuhs.org
Sender: "TUHS" <tuhs-bounces@minnie.tuhs.org>

Dave Horsfall <dave@horsfall.org> wrote:

> Is it just me, or did someone actually implement set-uid scripts?

I think it worked in the early Unixen (V7, 4.1 time frame, more or less
by accident) but after that the implications were recognized and only
compiled binaries could be run setuid.

> The trouble is, I've worked with dozens of Unix-based vendors over the 
> years (some good, some not so much) and so I've lost track of all the 
> stupidity that I've seen.

It's not just Unix vendors. It's software (and hardware) companies
in general.

Arnold