Shell script

Jason Clinton me at jasonclinton.com
Wed Nov 12 22:57:37 CST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Brian Densmore wrote:

| A question! I'm just curious, but
| shouldn't this be written in such a way to do a sudo rather
| than make this a root owned script? I mean root owned scripts
| are a generally a bad thing right?
| I like this script better too. It's self-documenting with the use
| of the named variables and doesn't use the more arcane set
| command.

I'm not sure that would privide any more security. If you sudo inside
the script, you would have to give root level permission to executing
commands at some point. The danger of letting a script be run by lower
users is that someone will come up with a clever way to pass a
username/password that executes a command as root. You could work around
that by some equally clever security checks but it sounds like a lot
more work than it's worth.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Understand the importance of encryption:

iD8DBQE/sqzOtSqjk42zvwkRAkjJAJ0eALW2QSbx7wicLMu0EN9yBWeVGwCffc7z
LjhJkHTefHzv5wbVLj9113I=
=aT/l
-----END PGP SIGNATURE-----




More information about the Kclug mailing list