Bugtraq mailing list archives
Wrapper v2 released
From: jzbiciak () DALDD SC TI COM (Joe Zbiciak)
Date: Sun, 15 Jun 1997 23:57:34 -0500
All, After many requests for features, etc. in my generic SUID/SGID wrapper, I've put together "Version 2". This version is significantly more flexible, while still being secure. Also, a minor (non-critical) bug in the first release was fixed. The biggest detail is that wrapping programs which can be called with multiple basenames works now. The basename that the wrapper was called with is extracted and looked up in a user-defined table of allowed names. The specific executable invoked is also determined by the basename, allowing multiple binaries to be wrapped with the same wrapper, provided each of these binaries has the same wrapping needs. The wrapper source, along with some programs which might be useful for stress testing it, can be found at: http://cegt201.bradley.edu/~im14u2c/wrapper/ The HTML documentation is currently incomplete. The wrapper itself is complete, as well as the (internal) documentation in the wrapper.h file. I've included (but not documented well) some features that will make automated installation of the wrapper easier, by allowing the configuration tables to be defined externally. I've received a C-shell script from Charles Howes which automates installing the old version of my wrapper. I intend to adapt and extend this to support the new version of the wrapper. The "external definition" functionality should make on-the-fly external configuration and building a breeze. Please -- read over "wrapper.h" and determine what items need to be changed for your particular situation. The "default" configuration isn't too bad, but probably isn't the best for all purposes. I'm open to suggestions. (After all, suggestions have got me to where I'm at now! :-) As always, please feel free to drop me a line with any questions, comments, suggestions, etc. (Beer and pizza are welcome also.) I'm always glad to help! Regards, --Joe Z. -- +--------------Joseph Zbiciak--------------+ |- - - - jzbiciak () daldd sc ti com - - - - -| | - - http://www.primenet.com/~im14u2c - - | Not your average "Joe." |- - - - Texas Instruments, Dallas - - - -| +-------#include <std_disclaimer.h>--------+
Current thread:
- Wrapper v2 released Joe Zbiciak (Jun 15)
- Netscape Admin Servers /tmp/deamonstat Yucel (Jun 17)
- Netscape Admin Servers *not vulnerable* Marcin Cieslak (Jun 17)
- Security hole in MajorCool 1.0.3 Benjamin J Stassart (Jun 18)
- ANNOUNCE: qmail Security Challenge Dave Sill (Jun 18)
- Seyon vulnerability - IRIX Shawn Hillis (Jun 17)
- Netscape Admin Servers /tmp/deamonstat Yucel (Jun 17)