shell trick? ( how to enable ENV file processing in suid script?)

[Sergey_27]

Hi,
Is there a way for ksh to make it ignore privileged mode? I have a suid script which has 3 lines:
#!/bin/ksh
export ENV=/home/user/env
exec ksh

and of course ksh senses that uid != ruid and sets privileged mode automatically. There seem to be nothing in the man pages which can force ksh to process ENV file.
Any suggestions?

Thanks,
Sergey.

[Dave La Mar]

Sergey,
We get around most of the hassle of environment by including those variables necessary with the script being executed.
Doesn't exactly answer your question bu it is a solution that works for us.

Best of luck.

Regards,
dl

[Sergey_27]

Yes, but what I really need is having aliases loaded.

[Mark Grant]

The way I tend to get around this is with a nasty little "C" wrapper to run the script. Make the C program setuid instead. In your case, make this call your first script. The UID and GID of the script will still be that of the user unless you also add a setuid(0) in there somewhere.something like #include main(){ execl("/mypath/myscript", "myscript",0);}

[RolandH]

Hi Sergey,

It works for me.

My Script looks like this
#!/bin/ksh
ENV=$HOME/alias.file
export ENV
exec ksh

alias.file must have read-permissions !!

HTH
Roland

[Steven E. Protter]

We have a line in /etc/profile or $HOME/.profile

ENV=/.kshrc

Aliases work.

SEP

[Sergey_27]

I guess the will explain my prolem:
man ksh
-p Disables processing of the $HOME/.profile
file and uses the file /etc/suid_profile
instead of the ENV file. This mode is on
whenever the effective uid (gid) is not
equal to the real uid (gid). Turning this
off causes the effective uid and gid to be
set to the real uid and gid.

[Sergey_27]

Decided not to use aliases but create functions instead and export FPATH to the child shell.

Tried c-wrapper but it still had euid!=uid

Thanks everybody.