Sticky bit (SetUID) doesn't work?
in [Mac Systems]
|
From: Wes Groleau on 1 Jun 2010 00:19 MBP:~ sysadmin$ ls -lat bin/MG -rwsrwxr-x@ 1 root staff 132 May 27 06:54 bin/MG MBP:~ sysadmin$ !$ bin/MG (lots of permission denied follows) in 10.6.3 - why? -- Wes Groleau Lesson plans and activities Feb. 23-27 http://Ideas.Lang-Learn.us/barrett?itemid=1372
From: Barry Margolin on 1 Jun 2010 23:48 In article <hu21nt$id0$1(a)news.eternal-september.org>, Wes Groleau <Groleau+news(a)FreeShell.org> wrote: > MBP:~ sysadmin$ ls -lat bin/MG > -rwsrwxr-x@ 1 root staff 132 May 27 06:54 bin/MG > MBP:~ sysadmin$ !$ > bin/MG > (lots of permission denied follows) > > in 10.6.3 - why? Is MG a script? setuid doesn't work for scripts. -- Barry Margolin, barmar(a)alum.mit.edu Arlington, MA *** PLEASE post questions in newsgroups, not directly to me *** *** PLEASE don't copy me on replies, I'll read them in the group ***
From: Wes Groleau on 2 Jun 2010 08:27 On 06-01-2010 23:48, Barry Margolin wrote: > Wes Groleau<Groleau+news(a)FreeShell.org> wrote: > >> MBP:~ sysadmin$ ls -lat bin/MG >> -rwsrwxr-x@ 1 root staff 132 May 27 06:54 bin/MG >> MBP:~ sysadmin$ !$ >> bin/MG >> (lots of permission denied follows) >> >> in 10.6.3 - why? > > Is MG a script? setuid doesn't work for scripts. Hmmm. Is that an Apple "security enhancement"? It worked on other Unixes I've been on. -- Wes Groleau "What you see and hear depends a good deal on where you are standing; it also depends on what kind of person you are." -- C.S.Lewis
From: Richard Maine on 2 Jun 2010 11:16 Wes Groleau <Groleau+news(a)FreeShell.org> wrote: > On 06-01-2010 23:48, Barry Margolin wrote: > > > > Is MG a script? setuid doesn't work for scripts. > > Hmmm. Is that an Apple "security enhancement"? > > It worked on other Unixes I've been on. Are you sure? I don't recall it as working on one's I've used, and I don't off-hand see how it could work. Setuid changes the effective uid of the process, but a shell script doesn't involve a separate process other than the shell. -- Richard Maine | Good judgment comes from experience; email: last name at domain . net | experience comes from bad judgment. domain: summertriangle | -- Mark Twain
From: Mark Conrad on 2 Jun 2010 19:25
In article <hu5ioi$ctu$1(a)news.eternal-september.org>, Wes Groleau <Groleau+news(a)FreeShell.org> wrote: > It worked on other Unixes I've been on. Have you checked out an old thread in "uk.comp.sys.mac" on 4/27/2010 - - - 21 posts, the upshot of which was a bug report to Apple about _their_ implementation of sticky bit not working properly or reliably. Title of the old thread was: "Sticky Bit Coming Unstuck". Any connection to your problem? Mark- |