Topic: CGI with Root

[Luke Drumm]

Hi,

I'm currently writing a small bit of CGI that will allow me to dynamically alter the SSHD section of the hosts.allow file.

All is well except when I get around to tasks that require privlidges greater than what the apache httpd tasks have.

What's the preferred method of getting a PHP script to expand a template (ie. call /sbin/e-smith/expand-template)?

Regards,
Luke

[Charlie Brady]

Luke Drumm wrote:

> What's the preferred method of getting a PHP script to expand
> a template (ie. call /sbin/e-smith/expand-template)?

There isn't one. PHP isn't a secure language to work with, even when not privileged. It's the last language I'd use for any security sensitive development.

It sounds like you are developing something like a manager add-on. There are plenty of examples in perl of such pivileged scripts, and the standard RPM build procedure assigns the needed setuid privileges.

[The devinfo mailing list exists to discuss issues such as this).

Charlie

[Luke Drumm]

Perl it is then.

Off to the developer mailing list I go....