Red Antigua - Run suid Perl scripts under Apache without suidperl (using a really simple C wrapper)

Search this site (by Google)

Home
About
Tools
Perl modules
Perl tutorials
C tutorials
Server configurations
UNIX on Windows
Misc. FreeBSD/UNIX
Redirect a web page
JavaScript
Virus list
Old stuff
Off topic

Tools (top)

Your IP
Check a site for broken links
(W3C)

Perl modules (top)

Tree::Numbered::Tools
(CPAN)

Perl tutorials (top)

Perl modules
HTML::Template
CGI::Application
Mail::POP3Client
Mail::Send
MIME::Tools
Cookies with CGI::Application
Upload files with CGI::Application
Download files with CGI::Application
Redirect with CGI::Application
CPAN shell
Install DBD::mysql from the CPAN shell
Perl trim function
Validate an IP with Perl
Run suid Perl scripts under Apache
Perl taint mode
Perl date functions with Date::Calc

In Spanish
Curso de Perl

C tutorials (top)

C - Introduction
C - Absolute beginner's Emacs
C - Examples for beginners
C - Makefile examples
C - Autotools examples

Server configurations (top)

DNS
Apache
Apache Authentication and Access Control
mod_perl on FreeBSD
MySQL
MySQL add account
phpMyAdmin
Squid
DHCP

UNIX on Windows (top)

Apache setup on Windows
MySQL setup on Windows
PHP setup on Windows
Perl setup on Windows
Emacs setup on Windows
UnxUtils
PuTTY
WinSCP
GIMP on Windows
MinGW - gcc on Windows
MSYS - make-in-a-shell on Windows
msysDTK - autotools on Windows
GDB for MinGW on Windows

Misc. FreeBSD/UNIX (top)

CD and DVD creation on FreeBSD using 'k3b' on FreeBSD
'ipf' on FreeBSD
'pf' on FreeBSD
'su' on FreeBSD
Mount an ISO image under FreeBSD
Load the correct sound driver under FreeBSD without knowing what sound card you are using
Simultaneous sound channels on FreeBSD
Boot floppies for FreeBSD
Problems with old disks/controllers and the 'ata' driver
FreeBSD network stuff
DOS-to-UNIX file conversion
favicon.ico on UNIX
Emacs tips
Sendmail tips
GKrellm
Command Line Calculator
Save multimedia streams with 'mplayer'
xargs - solution to 'Argument list too long'
Process multiple images from the command line using 'ImageMagick'
Turn the system bell off under X Windows
Process each line in an input file from the command line (or in a shell script)
How to keep a program running in the background using 'nohup'
How to remove symbolic links in the current directory using 'find' and 'rm'
How to remove Emacs backup files in the current directory and all subdirectories using 'find' and 'rm'
How to execute .profile without logging in

Redirect a web page (top)

Redirect to another web page
Apache redirect
C redirect
Perl redirect
PHP redirect
HTML redirect
JavaScript redirect

Javascript (top)

Trim function
Login form
Register form
Popup window

Virus list (top)

Latest viruses - Computer Virus HQ (external)
Latest 10 viruses - Sophos

Links (top)

HTML and PHP Scripts - Html Web Template

Old stuff (top)

POP3 server setup
About AnyMail
AnyMail downloads

Off topic (top)

Personal links

Validated by

Run suid Perl scripts under Apache without suidperl (using a really simple C wrapper)

If Perl was installed on your computer without the 'suidperl' program, you can't run suid Perl script.
One situation may be when you want to use your nifty administrative Perl tool from a web interface, i.e. run a script which requires root access.
Anyhow, your Apache server runs as user 'http' or 'nobody', which makes it impossible to use the Perl script with 'suidperl' missing.
Here is where we will use the C wrapper (calm down, you don't need any C knowledge at all):
Assume that your Perl script is installed as 'http://www.yourweb.com/cgi-bin/yourniftytool.pl', but it doesn't work very well... :-(

Create yourniftytool.c:

/*
 *
 * Compile via "cc -o yourniftytool yourniftytool.c"
 * and install as ./yourniftytool.
 * chown root:wheel ./yourniftytool 
 * chmod 4755 ./yourniftytool
 * chown root:wheel ./yourniftytool.pl 
 * chmod 0755 ./yourniftytool.pl
 *
 */
#define REAL_PATH "./yourniftytool.pl"
main(ac, av)
     char **av;
{
  execv(REAL_PATH, av);
}

Compile as

cc -o yourniftytool yourniftytool.c

Set permissions as follows:

chown root:wheel ./yourniftytool 
chmod 4755 ./yourniftytool
chown root:wheel ./yourniftytool.pl 
chmod 0755 ./yourniftytool.pl

Now you access the C wrapper as 'http://www.yourweb.com/cgi-bin/yourniftytool', which just calls 'yourniftytool.pl' with the suid flag set.
That's it!

NOTE:
If you didn't consider the SUID requirements for Perl scripts already, here is a hint what to put at the beginning of 'yourniftytool.pl':

# Required for SUID programs
#----------------------------------------
delete @ENV{qw(IFS CDPATH ENV BASH_ENV)};
$ENV{'PATH'}='/bin:/usr/bin';
#----------------------------------------

Last modified: Mon Jan 22 17:35:28 Romance Standard Time 2007