Is there something like 'shutdownrc' at SunOS 4.1 ?

Neil Rickert rickert at mp.cs.niu.edu
Sat Jun 1 07:11:23 AEST 1991


In article <1991May31.164829.13125 at micrognosis.co.uk> jharuni at micrognosis.co.uk (Jonathan Haruni) writes:
>
>The main reason shutdown is not a script is that it is suid-root, and
>it is not fashionable to have such shellscripts these days.

  Not on my system.  That would allow any peon to shutdown the system.

>But if you are contemplating having shutdown (which runs as root) call
>a shellscript, then you'd be no better off.  You may as well just write

  Why is this?  Most of the security holes in suid scripts are in the way
the shell can be fooled while invoking the script, and not in the fact of
using a script.  Otherwise you would have to prohibit root from using any
shell script ever.


-- 
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=
  Neil W. Rickert, Computer Science               <rickert at cs.niu.edu>
  Northern Illinois Univ.
  DeKalb, IL 60115                                   +1-815-753-6940



More information about the Comp.unix.admin mailing list