Executable script without read permissions

OverSea

Hi all,

So far I am at a loss on whether this can be done or not.  Is there a way to make a script executable to others but not readable?  I created a script with perms rwx--x--x but others can not execute it. (Permission denied).  I tried setting perms to rws--x--x and that results in the same error.

I also created a world readable/executable script that simply called the rwx--x--x script and it also results in a permission denied error.

Strangely enough, a compiled c program with rwx--x--x will run fine for any user.  I know the shell is going through the fork() and exec()  calls and I believe since the file is not readable that may be the cause, but why would it work with a compiled app and not a shell script.  For curiosity sake, I tried to exec the script and still errors out.  I also tried using the ksh shell vice my bash shell and that made no difference.  Any ideas on how to let someone execute a script without being able to view its contents?

Thanks in advance.

PS.  I am using Linux.   I do not have access to my UNIX box to see if it is a UNIX vs Linux thing.  I don't believe it would be, but who knows.

ivhb

1. 
   
2. 可能的话,还是用中文吧,ChinaUnix,呵呵
   
3. 看着费劲
   

复制代码

OverSea

原帖由 "ivhb" 发表：
可能的话,还是用中文吧,ChinaUnix,呵呵
看着费劲

  
偶想炼一下用E文提问!

ivhb

1. 
   
2. 对于您的为什么shell脚本非得给读权限才能执行呢? 当然给了读的权限,也就给了别人cp的权限(不考虑目录的限制).您会认为是一个很重要的安全问题.事实上,可以换个角度.如果不给对方读取的权限,就不知道执行的内容了么?至少通过两个方面可以知道.启动后,ps 监控,就能看到执行的内容;或许,根本不用这么麻烦的,set -vx足够了.
   

复制代码

A0110A

楼主也看英文讨论组，这个问题我前几天刚看过。但忘了在哪里了。

zben

script要被shell读取以后,解释执行的,不能读的话,script当然不能用了啦!

BJTD

if u really wanna hide something, wirte it in c and encrypt some critical sub-routines.

網中人

simply no: you can't execute a shell script without read & execute permission.

please try to figure out the meaning of word 'script', then you may understand why you should READ it.

z9600

if the srcipt can not be excuted with  rwx--x--x attribute, which may mean that those code in ur srcipt are only runnable at the shell.  try add "sh" before commands

BJTD

i cornfirm that what u described was true.

the reason:

for a script to run, bash (or other shells) need to read the source of the script to interpret it and print some screen outputs for u.  

if u have no read permission for the script, neither the bash process (owned by u).

a compiled c program does not need to read.