[issue10710] Is Misc/setuid-prog.c still needed?

R. David Murray report at bugs.python.org
Wed Dec 15 17:25:38 CET 2010


R. David Murray <rdmurray at bitdance.com> added the comment:

I started out writing that there must be better stuff available now for doing this, but a search on 'setuid wrapper' on google reveals mostly people asking about or talking about rolling their own special purpose scripts.

That said, there is at least one better alternative in the CGI context, which is Apache suexec support.

Overall, I don't think we want to be responsible for supporting this, since it really about OS level security and not a core expertise of the Python community.  I'd vote for dropping it.  After all, it will still be available in the source tarballs for older versions of Python, and it was never meant to be used directly anyway.

Personally, in this day and age I would never have thought to look in the Misc directory of the Python tarball for a setuid wrapper script.  I'd have started with google, and this script doesn't show up on first few pages, at least :)  So I don't think there's much value added in shipping this anymore, either.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue10710>
_______________________________________


More information about the Python-bugs-list mailing list