classification
Title: Is Misc/setuid-prog.c still needed?
Type: Stage: resolved
Components: Demos and Tools Versions: Python 3.2
process
Status: closed Resolution: fixed
Dependencies: Superseder:
Assigned To: Nosy List: brett.cannon, gvanrossum, jhylton, pitrou, r.david.murray
Priority: low Keywords:

Created on 2010-12-15 15:53 by pitrou, last changed 2010-12-16 18:26 by pitrou. This issue is now closed.

Messages (4)
msg124025 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2010-12-15 15:53
I guess it was created for ease of hosting CGI scripts written in Python, but is it still useful (or even functional) nowadays? Last updated goes back to 1998.
msg124026 - (view) Author: R. David Murray (r.david.murray) * (Python committer) Date: 2010-12-15 16:25
I started out writing that there must be better stuff available now for doing this, but a search on 'setuid wrapper' on google reveals mostly people asking about or talking about rolling their own special purpose scripts.

That said, there is at least one better alternative in the CGI context, which is Apache suexec support.

Overall, I don't think we want to be responsible for supporting this, since it really about OS level security and not a core expertise of the Python community.  I'd vote for dropping it.  After all, it will still be available in the source tarballs for older versions of Python, and it was never meant to be used directly anyway.

Personally, in this day and age I would never have thought to look in the Misc directory of the Python tarball for a setuid wrapper script.  I'd have started with google, and this script doesn't show up on first few pages, at least :)  So I don't think there's much value added in shipping this anymore, either.
msg124105 - (view) Author: Brett Cannon (brett.cannon) * (Python committer) Date: 2010-12-16 03:59
I say ditch it.
msg124148 - (view) Author: Antoine Pitrou (pitrou) * (Python committer) Date: 2010-12-16 18:26
Committed in r87323.
History
Date User Action Args
2010-12-16 18:26:02pitrousetstatus: open -> closed
versions: - Python 3.3
nosy: gvanrossum, jhylton, brett.cannon, pitrou, r.david.murray
messages: + msg124148

resolution: fixed
stage: resolved
2010-12-16 03:59:46brett.cannonsetnosy: gvanrossum, jhylton, brett.cannon, pitrou, r.david.murray
messages: + msg124105
2010-12-15 16:25:36r.david.murraysetnosy: gvanrossum, jhylton, brett.cannon, pitrou, r.david.murray
messages: + msg124026
2010-12-15 15:53:22pitroucreate