Re: set-uid root files in bin/
Posted in 1995
I checked off list of executables which are to be left set-uid root, and was not sure about the last two files, tbinit, and tbmode, since you didn't say they need to be set-uid root. I just wanted to double check before I turn off the set-uid root bits for these two. Here's list of all set-uid root files in bin/ and lib/ directories: bin: ---s--s--x 1 root informix 12964 Dec 31 1969 sgidsh ---s--s--x 1 root informix 378446 Dec 31 1969 tbinit ---s--s--x 1 root informix 326320 Dec 31 1969 tbmode ---s--s--x 1 root informix 612780 Dec 31 1969 tbmonitor ---s--s--x 1 root informix 347026 Dec 31 1969 tbspaces lib: ---s--s--x 1 root informix 1124110 Dec 31 1969 sqlturbo I'm glad Informix doesn't take the 'blunderbus' approach when it comes to setting the executables with set-uid root permissions, but I can never be sure what precautions Informix takes when the executables are running, eg, forcing IFS to '' when forking a shell while running as root, turning off set-uid root temporarily, and switch back to set-uid root only when necessary, etc. Oh, by the way when I installed SQL Runtime, the file bin/sacego (also the link bin/sperform) are missing. We don't really use ACE, and wouldn't worry too much about this. Just surprised. I had to comment out sacego and sperform in sqlrtfiles so that install can continue. Thanks ! -- ------------------------------------------------------- | Paul T. Pryor | Computer Data Systems, Inc | | (703) 756-8350 Voice/TDD | Falls Church, VA USA | |-------------------------------------------------------| | ptp@fallschurch-acirs2.army.mil [192.86.95.3] | -------------------------------------------------------