Calling a script from a setuid root C program – script does not run as root

by

Since the suid bit on executables only changes the effective UID (EUID) the executable will run as, and not the real UID (RUID) which getuid() returns, and in addition to the restriction on suid interpreted scripts (any executable beginning with “#!“), some shells like bash as an extra safety measure will set the EUID back to the RUID in this case, you will need to use the call setuid(0) in the C code before executing the script.

See the man pages of the setuid, seteuid, getuid, and geteuid to learn the exact semantics of the real and effective UIDs.

(WARNING) Of course, this is an appropriate point to mention that the restriction on suid scripts in many Unix systems, shells and interpreters, are there for a reason, which is that if the script is not very careful about sanitizing its input and the state of environment when it is executed, they are dangerous and can be exploited for security escalation. So be very careful when doing this. Set the access to your script and wrapper as strict as you can, only allow this very specific script which you intend to be executed, and clear the environment within your C program before starting the script, setting environment variables such as PATH to contain exactly what is necessary in the right order and no directories that are writable to others.

More Related Contents:

  1. How to pass arguments
  2. C – Trouble calling a function
  3. In c, read floats from one line, seperated by space [duplicate]
  4. What is the purpose of static keyword in array parameter of function like “char s[static 10]”?
  5. How to change entry point of C program with gcc?
  6. Threadsafe vs re-entrant
  7. What is this strange function definition syntax in C? [duplicate]
  8. malloced array VS. variable-length-array [duplicate]
  9. getch is deprecated
  10. How to access C variable for inline assembly manipulation?
  11. undefined reference to `strlwr’
  12. What parts of this HelloWorld assembly code are essential if I were to write the program in assembly?
  13. Read from file or stdin
  14. Detecting 64bit compile in C
  15. Do I really need malloc?
  16. Why is (sizeof(int) > -1) false? [duplicate]
  17. How to link to a static library in C?
  18. How to make gcc link strong symbol in static library to overwrite weak symbol?
  19. How do header and source files in C work?
  20. Having trouble with fork(), pipe(), dup2() and exec() in C
  21. Can local and register variables be declared extern?
  22. Read input.txt file and also output.bmp file from terminal (C-programming)
  23. What exactly is the FILE keyword in C?
  24. how to quit the blocking of xlib’s XNextEvent
  25. How to copy directory from source tree to binary tree?
  26. Different way of accessing array elements in C
  27. winapi: CreateProcess but hide the process’ window?
  28. What are the most common naming conventions in C?
  29. Ignoring return values in C
  30. ANSI C No-echo keyboard input

Leave a Comment