cgi use root uid

Kelly Lynn Martin kelly at poverty.bloomington.in.us
Fri Jan 14 16:57:53 EST 2000


On Fri, 14 Jan 2000 16:10:57 +0800, "Öܹ«" <jfzhou at 188.net> said:

>Can someone tell me how to run a python cgi that can have root right.
>the main perpose is to modify some file like passwd,hosts

Since Python is a script interpreter, you'll have to use a cgi wrapper
to avoid the setuid script race security hole (which is why most UNIX
kernels disallow setuid scripts).  The Perl perlsec manpage explains
how to do this for Perl; essentially the same approach should work
with Python.

Kelly




More information about the Python-list mailing list