Sujet : Re: Simple way for web to execute root shell script.
De : lew.pitcher (at) *nospam* digitalfreehold.ca (Lew Pitcher)
Groupes : comp.os.linux.misc comp.sys.raspberry-piDate : 23. May 2025, 15:23:11
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <100q0cf$40ea$2@dont-email.me>
References : 1 2
User-Agent : Pan/0.139 (Sexual Chocolate; GIT bf56508 git://git.gnome.org/pan2)
On Fri, 23 May 2025 14:08:25 +0000, Lew Pitcher wrote:
[snip]
If you mistrust sudo(1), then you /could/ write a simple setuid wrapper program
that executes the script after making some rudimentary userid checks
(ruid == www, euid == root, etc. (perhaps check that session leader is apache?))
Nope, not session leader.
But process group leader works.
-- Lew Pitcher"In Skills We Trust"