Re: Perl Help!!!

Sandip Bhattacharya wrote:
> 
> Use sudo only. Check the NOPASSWD option in sudoers man page. It wont ask for 
> a password then. I have used this before.
> 

1) sudo with NOPASSWD option

2) super - better than sudo IMO

Super allows specified users to execute scripts (or other commands) as
if they were root; or it can set the uid, gid, and/or supplementary
groups on a per-command basis before executing the command. It is
intended to be a secure alternative to making scripts setuid root. Super
also allows ordinary users to supply commands for execution by others;
these execute with the uid, gid, and groups of the user offering the
command.

Super consults a ``super.tab'' file to see if the user is allowed to
execute the requested command. If permission is granted, super will exec
pgm [ args ], where pgm is the program that is associated with this
command. Root is always permitted to execute any command in the super file.


3) Apache suEXEC mechanism

The suEXEC feature provides Apache users the ability to run CGI and SSI
programs under user IDs different from the user ID of the calling
web-server. Normally, when a CGI or SSI program executes, it runs as the
same user who is running the web server.

Used properly, this feature can reduce considerably the security risks
involved with allowing users to develop and run private CGI or SSI
programs. However, if suEXEC is improperly configured, it can cause any
number of problems and possibly create new holes in your computer's
security. If you aren't familiar with managing setuid root programs and
the security issues they present, we highly recommend that you not
consider using suEXEC.

4) Create a daemon which runs as root and accepts command line
    arguments from other scripts (your CGI script for example) and
    then executes them. (may need lot of work from your side, but
    safest of all, IMO)

--
Rohan