Re: Interesting suid problem

[Sven Neumann <sven gimp org>]

Hi,

Jeff Shipman - SysProg <jeff nmt edu> writes:

> I have a situation where I am using GTK as
> a frontend for a databse we have. Everything
> is fine except for the fact that I want to
> keep the database password secure. I do
> not want to store it in the program for
> obvious reasons so I thought I would save
> it in an external file and have the program
> read it on startup. The only decent way that
> I know of to do this have a special user
> which can read the file and have the program
> setuid to run as that user. However, gtk
> doesn't like being run setuid. 

If you make your GTK+ app run setuid you can as well make the passwd
file readable by everyone.  How about making the file readable by
members of a special group and add authorized users to that group ?


Salut, Sven