Re: running script via root permission again!!O

I suggest witing small C applications that setuid() to whatever user you need. Set root ownership and the sticky bit and make sure that you're using fgets() and not gets() or other functions with buffer overrun holes. Quoting Web Admin (webadmin@morva.net): > Forget about cron, and changing file permissions. changing > httpd owner is ok, but i want to do this with least changes > on the server itself. How does administration tools written > in perl work?!!!!! can anyone help? suppose that you want > to write a mail reader in perl, what will you do?! > Ahmad > > > ----- Original Message ----- > From: "Greg Linnell" <greg@william-russell.co.uk> > To: "'Web Admin'" <webadmin@morva.net>; "Php3 Help > (E-mail)" > <php-general@lists.php.net> > Sent: Tuesday, August 29, 2000 7:41 PM > Subject: RE: [PHP] running script via root permission again!! > > > > Firstly, forget about running perl/php as root, you DO NOT want to do > this, > > BAD, VERY VERY BAD, I think apache tells you to go away if you try running > > it as root anywayz. > > > > How about this then for your adding/changeing of users. Use nobody to > create > > a TO DO list. Then using cron setup a job that reads the TO DO list as > root > > and then executes the appropriate commands. > > > > Keep in mind that you do not want somebody to schedule a delete user root > > command. :-) > > > > Greg > > > > -----Original Message----- > > From: Web Admin [mailto:webadmin@morva.net] > > Sent: 29 August 2000 15:54 > > To: greg@william-russell.co.uk > > Subject: Re: [PHP] running script via root permission again!! > > > > > > So, now, who can say how can I run my perl/php scripts > > with ROOT permission?!!! that's critical, please reply! read > > below, i will be so glad if anyone can help!! > > regards, > > Ahmad Anvari > > > > > > > > > > > > > hey gurus, > > > i finally couldn't find a suitable way for running my php scripts > > > to read and show /var/log/messages in the browser. does > > > anyone know how to do that? > > > - i changed the file mode to 4755 and chown root.root (X) didnt work > > > - tried to change the httpd process owner from nobody to root, > > > it can't be changed unless it recompiled and unsecure (X) > > > - i dont want to chmod 777 /var/log/messages > > > > > > can anyone help please?!! you think using sudo is a good solution? > > > if yes, could anyone please describe if i have to run httpd using sudo > > > or give tail access of /var/log/messages to nobody? > > > > > > --------------------- > > > 2nd question, i'm writing admin tools for a company to add users and > > > change user passwords, etc.. i decided not to write in php3 and write > > > in perl. how can I run perl scripts with root privileges? does chmod > > > work? i tried 4755 but it can't still print tail > > > /var/log/messages > which > > > is owned by root. > > > > > > Linuxconf > > > > > > > > > This is urgent, please help ASAP!! > > > Ahmad Anvari > > > Website Admin. > > > Morva Network > > > > > > > > > > > > > > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > -- aaron / aig4.com