From owner-cvs-all Fri Aug 11 14:14:25 2000 Delivered-To: cvs-all@freebsd.org Received: from ns1.sunesi.net (ns1.sunesi.net [196.15.192.194]) by hub.freebsd.org (Postfix) with ESMTP id 07D0437BBE8; Fri, 11 Aug 2000 14:14:10 -0700 (PDT) (envelope-from nbm@sunesi.net) Received: from nbm by ns1.sunesi.net with local (Exim 3.03 #1) id 13NM7b-000FLl-00; Fri, 11 Aug 2000 23:13:43 +0200 Date: Fri, 11 Aug 2000 23:13:43 +0200 From: Neil Blakey-Milner To: Peter Wemm Cc: Warner Losh , Christopher Masto , "Chris D. Faulhaber" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/gnu/usr.bin/perl Makefile Message-ID: <20000811231343.A58966@mithrandr.moria.org> References: <200008111915.NAA36635@harmony.village.org> <200008112103.OAA92489@netplex.com.au> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <200008112103.OAA92489@netplex.com.au>; from peter@netplex.com.au on Fri, Aug 11, 2000 at 02:03:09PM -0700 Organization: Sunesi Clinical Systems X-Operating-System: FreeBSD 3.3-RELEASE i386 X-URL: http://rucus.ru.ac.za/~nbm/ Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri 2000-08-11 (14:03), Peter Wemm wrote: > Actually.. How does this sound: > > cat /usr/bin/suidperl > #! /bin/sh > echo "suidperl is not installed by default. blah blah danger etc. try:" > echo "cp /usr/bin/suidperl.real /usr/bin/suidperl" > echo "chmod 6111 /usr/bin/suidperl" > exit 1 > > and install suidperl as /usr/bin/suidperl.real with mode 444. Only install > the suidperl wrapper into /usr/bin if it is not already there. That > stops POLA by preventing blowing away a real /usr/bin/suidperl. > > If ENABLE_SUIDPERL is active, then unconditionally install suidperl in > /usr/bin/suidperl with the correct modes. #!/bin/sh if [ -u /usr/libexec/suidperl ]; then exec /usr/libexec/suidperl fi echo "suidperl is not installed with suid privilege by default" echo "If you know what you're doing, type chmod 4755 /usr/libexec/suidperl" exit 1 Neil -- Neil Blakey-Milner Sunesi Clinical Systems nbm@mithrandr.moria.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message