From owner-cvs-all Fri Aug 11 14: 3:26 2000 Delivered-To: cvs-all@freebsd.org Received: from netplex.com.au (adsl-63-207-30-186.dsl.snfc21.pacbell.net [63.207.30.186]) by hub.freebsd.org (Postfix) with ESMTP id 63F3837BB0A; Fri, 11 Aug 2000 14:03:20 -0700 (PDT) (envelope-from peter@netplex.com.au) Received: from netplex.com.au (peter@localhost [127.0.0.1]) by netplex.com.au (8.9.3/8.9.3) with ESMTP id OAA92489; Fri, 11 Aug 2000 14:03:09 -0700 (PDT) (envelope-from peter@netplex.com.au) Message-Id: <200008112103.OAA92489@netplex.com.au> X-Mailer: exmh version 2.1.1 10/15/1999 To: Warner Losh Cc: Christopher Masto , "Chris D. Faulhaber" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/gnu/usr.bin/perl Makefile In-Reply-To: <200008111915.NAA36635@harmony.village.org> Date: Fri, 11 Aug 2000 14:03:09 -0700 From: Peter Wemm Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Warner Losh wrote: > In message <200008111913.MAA91892@netplex.com.au> Peter Wemm writes: > : > Side note: is there a way to create a port that builds part of the > : > /usr/src tree in a different than default way? > : > > : > Warner > : > : Not easily. I would prefer that we built and instaled it, but made it mode > : 444 (unexecutable) or something and let the user chmod 6111 later if they > : want it. It is a lot easier to activate a binary than find or build it. > > OK. Any preference between mode 444 and mode 0? Since it is hard to > make a port to do this, I think that you may be right. Actually.. How does this sound: cat /usr/bin/suidperl #! /bin/sh echo "suidperl is not installed by default. blah blah danger etc. try:" echo "cp /usr/bin/suidperl.real /usr/bin/suidperl" echo "chmod 6111 /usr/bin/suidperl" exit 1 and install suidperl as /usr/bin/suidperl.real with mode 444. Only install the suidperl wrapper into /usr/bin if it is not already there. That stops POLA by preventing blowing away a real /usr/bin/suidperl. If ENABLE_SUIDPERL is active, then unconditionally install suidperl in /usr/bin/suidperl with the correct modes. > Warner > Cheers, -Peter -- Peter Wemm - peter@FreeBSD.org; peter@yahoo-inc.com; peter@netplex.com.au "All of this is for nothing if we don't go to the stars" - JMS/B5 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message