Re: Executing Esql-C pgm

Posted in 1997

William Harris — 23 Oct 1997 14:15:38 GMT — source: Informix-list mailing list archive (1991-1998)

In article <62ldvk$3u6@cssun.mathcs.emory.edu>, johnl@informix.com says... >Never, ever, have a SUID program writable by anyone other than the owner! >I can write what ever I like over your program, and become the relevant >user. Aside from the security issues, the setuid program probably won't have the desired permissions anyway. The s-bit only sets the effective user id, and (at least with Informix 5) the Informix engine uses the real user id. -- William Harris william@carsinfo.com Check out the NAGS spam filter. http://www.nags.org