Beefy Boxes and Bandwidth Generously Provided by pair Networks
good chemistry is complicated,
and a little bit messy -LW
 
PerlMonks  

Re: How do I execute as root?

by HaB (Sexton)
on Nov 14, 2000 at 01:35 UTC ( [id://41440]=note: print w/replies, xml ) Need Help??


in reply to How do I execute as root?

Yikes.

The UNIX sysadmin in me cringes at the thought of a CGI running as root. Especially if it's coded by someone who by his own admission is new to unix and perl.

I would have the CGI take the needed info from the user, then call an external script to actually add the user dirs and such. Do NOT make it suid root. Use a package such as scmd or sudo to execute the script itself, and make SURE that the data passed to the script is good, ie, check for anything other than letters & digits.

Remember...good system admins are conscientious, the great ones are paranoid.


-HaB


P.S. I can't find a link for scmd. It may be part of the ssh package, tho.

hword.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://41440]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others taking refuge in the Monastery: (2)
As of 2024-06-16 05:30 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found

    Notices?
    erzuuli‥ 🛈The London Perl and Raku Workshop takes place on 26th Oct 2024. If your company depends on Perl, please consider sponsoring and/or attending.