System command on FreeBSD...

[Kenneth Brody]

Bill Campbell wrote:
[...]
> >Normally, filePro runs any system commands as uid=$ORIGINAL_UID and
> >euid=filepro.  If PFSYSEUID=OFF, then filePro will give up its euid
> >for the duration of the system command.
> 
> Good info Ken!
> 
> A couple of questions though:
> 
>   1.  If you set PFSYSEUID=OFF, does it affect pipes to the lp command?

Only SYSTEM.

>   2.  Does this work on SCO OpenServer?  I thought their commends to change
>       the effective uid were a one-way trapdoor.

As listed in the docs for PFSYSEUID:

    A SYSTEM command will be executed without the filePro setuid.  Some
    systems may not allow a program to reclaim a setuid after giving it
    up.  On these systems, setting this variable will cause bad things
    to happen to filePro.  SCO OSV5 does not have a problem with this.
    Linux kernels prior to 1.1.37 have a problem.

-- 
+-------------------------+--------------------+-----------------------------+
| Kenneth J. Brody        | www.hvcomputer.com |                             |
| kenbrody/at\spamcop.net | www.fptech.com     | #include <std_disclaimer.h> |
+-------------------------+--------------------+-----------------------------+
Don't e-mail me at: <mailto:ThisIsASpamTrap at gmail.com>