Calling a setuid script in a perl script

I have two perl scripts:

1. getPwd.pl - setuid perl script that returns a password

sub getOraPwd{
...
...
return $password;


}
getOraPwd();
[download]

2. testDBConn.pl

I want to call getPwd.pl in the testDBConn.pl script and assign the result of the getPwd script to the $password variable to connect to a database. Remember the getPwd.pl script is setuid, and therefore setup for the testDBConn.pl to run getPwd.pl

eg.

$username="blah";
$password=result from getPwd.pl
$dsn=qq{...};
$dbh=DBI->connect($dsn, $username, $password)};
[download]

Comment on Calling a setuid script in a perl script Select or Download Code

Replies are listed 'Best First'.
Re: Calling a setuid script in a perl script by afoken (Chancellor) on Nov 19, 2011 at 08:32 UTC
This is exactly the same problem you have already posted as Perl Setuid - Oracle Password Hardcoding. You were told to use sudo. You were told that this is not a perl problem, but a unix problem. Why do you start a new thread? Alexander -- Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)	[reply]
Re^2: Calling a setuid script in a perl script by hmadhi (Acolyte) on Nov 21, 2011 at 05:07 UTC
Apologies, You are correct. However I also needed to know how to pass a value from one script to another. I am indeed now going to use sudo. This is the error I get sudo: sorry, you must have a tty to run sudo	[reply]
Re^3: Calling a setuid script in a perl script by Anonymous Monk on Nov 24, 2011 at 16:19 UTC
the problem is that sudo requires a tty to run. You will not be able to run sudo on a crontab or cgi.	[reply]
Re^4: Calling a setuid script in a perl script by afoken (Chancellor) on Nov 24, 2011 at 16:53 UTC
Re^3: Calling a setuid script in a perl script by hmadhi (Acolyte) on Nov 24, 2011 at 17:17 UTC
Thanks. I am using: Red Hat Enterprise Linux Server release 5.7 (Tikanga). Will check why	[reply]
Re: Calling a setuid script in a perl script by chilledham (Friar) on Nov 18, 2011 at 16:52 UTC
In testDBConn.pl: `# assuming getPwd.pl is in @INC require 'getPwd.pl'; $password = getOraPwd();` [download] For this to work getPwd.pl will need to return a true value. That's as simple as putting `1;` as the last line in the script. You might also consider creating a module and `use`'ing that. This might be helpful in such a venture: José's Guide for creating Perl modules	[reply] [d/l] [select]
Re^2: Calling a setuid script in a perl script by mbethke (Hermit) on Nov 18, 2011 at 17:00 UTC
I assume the OP wants it as an extra suid script because it must read a file the main script has no permissions for, and it makes complete sense to keep the suid portions of a script as small as possible. Making the whole thing a module would defeat this purpose. If I understood this correctly, the solution is very easy: $password = `getPwd.pl`; chomp $password; [download]	[reply] [d/l]