27 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Exec'ing makealia...
FromSent OnAttachments
John DoeJan 22, 2001 5:31 pm 
Sam VarshavchikJan 22, 2001 5:46 pm 
Nat SakimuraJan 22, 2001 6:26 pm 
Sam VarshavchikJan 22, 2001 6:57 pm 
Patrick PriceJan 22, 2001 9:23 pm 
Daniel BiddleJan 22, 2001 10:36 pm 
Sam VarshavchikJan 23, 2001 4:48 am 
Alexei Batyr'Jan 23, 2001 5:45 am 
Joshua T . BlantonJan 23, 2001 5:46 am 
Patrick PriceJan 23, 2001 12:43 pm 
Sam VarshavchikJan 23, 2001 2:57 pm 
Sam VarshavchikJan 23, 2001 2:59 pm 
Sam VarshavchikJan 23, 2001 3:05 pm 
Patrick PriceJan 23, 2001 4:19 pm 
Robert August Vincent IIJan 23, 2001 10:11 pm 
Peter PeltonenJan 24, 2001 2:09 am 
Alexei Batyr'Jan 24, 2001 4:46 am 
Sam VarshavchikJan 24, 2001 5:28 am 
Alexei Batyr'Jan 24, 2001 6:14 am.txt
Sam VarshavchikJan 24, 2001 2:38 pm 
Sam VarshavchikJan 24, 2001 2:38 pm 
Patrick PriceJan 24, 2001 2:44 pm 
Alexei Batyr'Jan 25, 2001 4:44 am 
Patrick PriceJan 31, 2001 2:45 pm 
Daniel BiddleJan 31, 2001 2:55 pm 
Patrick PriceJan 31, 2001 4:28 pm 
Sam VarshavchikJan 31, 2001 6:14 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] Exec'ing makealiases via web server?Actions...
From:Daniel Biddle (del@osian.net)
Date:Jan 22, 2001 10:36:50 pm
List:net.sourceforge.lists.courier-users

On Tue, 23 Jan 2001, Patrick Price wrote:

I'm trying a simple system call to run makealiases from a web server CGI.

The .c source contains:

strcpy(buffer, "makealiases"); system(buffer);

This could be written as the following, I think:

system("makealiases");

returns a value of 256. The binary is chmod 4755. Ownership/group don't seem to matter.

Running the same CGI from the shell prompt works just fine and executes makealiases.

It could be running with a different value of $PATH. Try putting the full pathname in the system() call.

Also, there may be some restrictions imposed by your system on suid programs and shell scripts. For instance, the man page for system() on a Linux system says this:

Do not use system() from a program with suid or sgid priv- ileges, because strange values for some environment vari- ables might be used to subvert system integrity. Use the exec(3) family of functions instead, but not execlp(3) or execvp(3). system() will not, in fact, work properly from programs with suid or sgid privileges on systems on which /bin/sh is bash version 2, since bash 2 drops privileges on startup. (Debian uses a modified bash which does not do this when invoked as sh.)

hope this helps,

-- Daniel Biddle <del@osian.net>