Bugtraq: Re: Setuid programs run from shell scripts?

[Quentin.Fennessy () SEMATECH Org (Quentin Fennessy)]

> text deleted...
> (Not to get into the set-UID shell-script argument again. ;-)
> Clearly, the set-UID bit on one or the other must take precedence.
> Someone, somewhere decided that it would be the set-UID bit on the
> script.  This was maybe the wrong decision, but it's the one we're
> stuck with, for the moment at least.
> -----
Fred-
    A shell script runs under the uid of the account executing it.
I don't think there is any way for a script or any other subprocess
to know whether it is being executed by any given account or by
an account using a setuid program.  So the script suid has to take
preference.  Unless you ignore suid on scripts altogether.

Quentin