From owner-cvs-all Fri Aug 11 23:59:56 2000 Delivered-To: cvs-all@freebsd.org Received: from grimreaper.grondar.za (grimreaper.grondar.za [196.7.18.138]) by hub.freebsd.org (Postfix) with ESMTP id E850337BA29; Fri, 11 Aug 2000 23:59:46 -0700 (PDT) (envelope-from mark@grondar.za) Received: from grimreaper.grondar.za (localhost [127.0.0.1]) by grimreaper.grondar.za (8.9.3/8.9.3) with ESMTP id IAA18409; Sat, 12 Aug 2000 08:55:41 +0200 (SAST) (envelope-from mark@grimreaper.grondar.za) Message-Id: <200008120655.IAA18409@grimreaper.grondar.za> To: Neil Blakey-Milner Cc: Marcel Moolenaar , Warner Losh , Christopher Masto , "Chris D. Faulhaber" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/gnu/usr.bin/perl Makefile References: <20000811215224.B57942@mithrandr.moria.org> In-Reply-To: <20000811215224.B57942@mithrandr.moria.org> ; from Neil Blakey-Milner "Fri, 11 Aug 2000 21:52:24 +0200." Date: Sat, 12 Aug 2000 08:55:41 +0200 From: Mark Murray Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > On Fri 2000-08-11 (12:50), Marcel Moolenaar wrote: > > I opt for a wrapper that, if sperl is "disabled", fails with an error > > explaining why sperl won't work as expected. Installing sperl without > > the expected mods is against POLA. > > If it is documented, you needn't be astonished. Also, I imagine that we > can make suidperl a wrapper which explains the problem, and _also_ > provide it without setuid privilege (or just build it into suidperl, but > that'd mean getting dirty with the contrib code). If you reset the suid-bit on sperl5, then trying to run a suidperl script results in: [greenpeace] ~/work $ ./test.pl Can't do setuid M > > Neil > -- > Neil Blakey-Milner > Sunesi Clinical Systems > nbm@mithrandr.moria.org > > -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message