[Re: [[Sig] Setuid -- am I doing it right?]]
Randy Kramer
rhkramer@fast.net
Tue, 15 May 2001 11:46:42 -0400
Paul,
Thanks for the response!
Paul F.Ryan wrote:
> I believe it has to do with a script being run in a sub-shell, while an
> executable is under your current process. If you fail to trap all the signals
> in your script, a user could break out and roam about as root. Other
> opinions/explantions are welcomed since I'm running on my failing, aged memory
> out here in Chicago.
Sounds like there is a "real" reason.
>
> You may also wish to reference `man setuid` and `man setreuid`.
Perhaps more than once!
Randy Kramer