modify & run system files

[gushy]

Ok, my attempt to find a web interface to senmail and virtual mailboxes has failed (unless I wish to install qmail!).

So I'm gonna write the damn thing myself. Question is can it be done?

I need to be able to modify some files that are root access only:
/etc/group
/etc/passwd
/etc/virtusertable

I then I need to be able to run:
/usr/bsd/newvtable

again it's root access only.

Can this be done? Where do I start looking?
Somebody please point me in the right direction.

thanks.

• Nick Gushlow

[Anon]

Well you can make you're webserver run as root. If you do it correctly you could have it running on an obscure port that only you know about (except for port scanners). Then have your pages do heavy authentication on you when you use that page, and make sure everything is SSL.

Or you could create a SUID (Set User Id) script that does some of the work for you and just call that script from your web pages.

Personally I prefer the 1st method since you can have one webserver running for the world where everyone expects to find it, and one running as root on it's own port and only serving 1 http session then work on securing the entire thing with encryption and authentication.

[gushy]

I like the sound of the first option as it's more secure; unfortunately these scripts are going to be used by our customers so they can stop bugging us to change their mail aliases. So it looks like I'll have to use the second option.

Thanks for your help.

-- Nick.