After many requests for features, etc. in my generic SUID/SGID wrapper,
I've put together "Version 2". This version is significantly more flexible,
while still being secure. Also, a minor (non-critical) bug in the first
release was fixed.
The biggest detail is that wrapping programs which can be called with
multiple basenames works now. The basename that the wrapper was called
with is extracted and looked up in a user-defined table of allowed names.
The specific executable invoked is also determined by the basename,
allowing multiple binaries to be wrapped with the same wrapper, provided
each of these binaries has the same wrapping needs.
The wrapper source, along with some programs which might be useful for
stress testing it, can be found at:
http://cegt201.bradley.edu/~im14u2c/wrapper/
The HTML documentation is currently incomplete. The wrapper itself is
complete, as well as the (internal) documentation in the wrapper.h
file. I've included (but not documented well) some features that will
make automated installation of the wrapper easier, by allowing the
configuration tables to be defined externally.
I've received a C-shell script from Charles Howes which automates
installing the old version of my wrapper. I intend to adapt and extend
this to support the new version of the wrapper. The "external definition"
functionality should make on-the-fly external configuration and building
a breeze.
Please -- read over "wrapper.h" and determine what items need to be
changed for your particular situation. The "default" configuration
isn't too bad, but probably isn't the best for all purposes. I'm
open to suggestions. (After all, suggestions have got me to where I'm
at now! :-)
As always, please feel free to drop me a line with any questions,
comments, suggestions, etc. (Beer and pizza are welcome also.)
I'm always glad to help!
Regards,
--Joe Z.
-- +--------------Joseph Zbiciak--------------+ |- - - - jzbiciak@daldd.sc.ti.com - - - - -| | - - http://www.primenet.com/~im14u2c - - | Not your average "Joe." |- - - - Texas Instruments, Dallas - - - -| +-------#include <std_disclaimer.h>--------+