Run perlscript with sudo permissions through phpscript

[Eax.exe]

Hi there

I'm trying to set up a php-script that calls a perl-script with sudo permissions (the perl-script needs these permissions to run its commands).

This php-script is hosted on a LAMP apache server (in Ubuntu) and is run by the user www-data (pseudouser created by apache).
I have tried adding the line:

www-data ALL=(ALL) NOPASSWD:ALL

But it doesn't seem to work and it seems like somewhat of a security issue.

How can I do this?
Thanks in advance

[diesch]

Make the perl script SUID root and use perl-suid to run it.

[Eax.exe]

Make the perl script SUID root and use perl-suid to run it.

Can you explain how please?

[Eax.exe]

I installed the package "super" containing "setuid" but I have no idea how to use it :/

[diesch]

1. install the package perl-suid
2. make root the owner and www-data the group of the file:

sudo chown:www-data root your_perl_script

3. set the SUID bit, read and exec permissions for the group, no permisions for others:

sudo chmod u+s,g=rx,o-rwx your_perl_scrip

4. In the first line of the script replace perl with suidperl
e.g. change

#!/usr/bin/perl -w

to

#!/usr/bin/suidperl -w

Now if you run the script it's running as root.

Be careful as everyone in the www-data group can run this script as root!

[Eax.exe]

1. install the package perl-suid
2. make root the owner and www-data the group of the file:

sudo chown:www-data root your_perl_script

3. set the SUID bit, read and exec permissions for the group, no permisions for others:

sudo chmod u+s,g=rx,o-rwx your_perl_scrip

4. In the first line of the script replace perl with suidperl
e.g. change

#!/usr/bin/perl -w

to

#!/usr/bin/suidperl -w

Now if you run the script it's running as root.

Be careful as everyone in the www-data group can run this script as root!

Thank you so so much