• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
set UID scripts
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

set UID scripts


  • Subject: set UID scripts
  • From: Steve Modica <email@hidden>
  • Date: Wed, 09 Jun 2004 07:04:52 -0500
  • Organization: Small Tree Communications

In UNIX-land, most OSs disable setuid scripts by default. They are a "bad thing". You usually have to change some systune to re-enable them.

I would modify your setup to include ktrace either before your first cp command, or before you invoke your script so you can see if the setuid syscalls are failing.

I looked through sysctl and didn't see anything like "nosetuid", but I'll bet there's something in there that does that. Perhaps: kern.securelevel = 1

Just poke around on the BSD mailing lists looking for setuid scripts.

Steve


Hi,
Any ideas, as I'm a little stuck here, as I find it weird, as I'm guess
the installer does something similar when it's executing its post preflight
script files.

Thanks
Mark.

-----------------------------------------------------------------------

Hi,
I was wondering if anybody has any ideas/pointers why I cannot exec my
shell script to execute, which I have written to copy over some .kext's to
/System/Library/Extensions and then do a kextload, which all works great is
I put my self in "su" mode in the terminal app.

Where the problem lies is that I'm trying to get this script kicked off
from within our tutorial/installer application, so I use Authorization API
like I have for doing network configuration.

But here, when I pass in a stdout parameter. I'm getting "Permission
errors", from my cp commands, and kextload is saying I need to be root, but
the authorization dialog came up, and did it thing, so slightly confused
:-(.

Any idea's,
Thanks
Mark.


--
Steve Modica
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.


  • Prev by Date: Re: Network setup
  • Next by Date: MoreSCFPortScanner.c Problem
  • Previous by thread: Use CFMessagePort in CFM app?
  • Next by thread: MoreSCFPortScanner.c Problem
  • Index(es):
    • Date
    • Thread