From owner-freebsd-security  Fri Mar 28 12:07:26 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id MAA00354
          for security-outgoing; Fri, 28 Mar 1997 12:07:26 -0800 (PST)
Received: from cwsys.cwent.com (0@cschuber.net.gov.bc.ca [142.31.240.113])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id MAA00302;
          Fri, 28 Mar 1997 12:06:16 -0800 (PST)
Received: (from uucp@localhost) by cwsys.cwent.com (8.8.5/8.6.10) id IAA06347; Fri, 28 Mar 1997 08:55:14 -0800 (PST)
Message-Id: <199703281655.IAA06347@cwsys.cwent.com>
Received: from localhost.cwent.com(127.0.0.1), claiming to be "cwsys"
 via SMTP by localhost.cwent.com, id smtpd006344; Fri Mar 28 16:55:09 1997
Reply-to: cys@wlc.com
X-Mailer: MH
To: Gary Clark II <gclarkii@main.gbdata.com>
cc: cschuber@uumail.gov.bc.ca, alexv@sui.gda.itesm.mx,
        freebsd-bugs@freebsd.org, freebsd-security@freebsd.org,
        cmercado@interface.com.mx
Subject: Re: SetUID & Apache in 2.2-RELEASE... 
In-reply-to: Your message of "Fri, 28 Mar 1997 00:18:04 CST."
             <199703280618.AAA11018@main.gbdata.com> 
Date: Fri, 28 Mar 1997 08:55:08 -0800
From: Cy Schubert <cy@cwsys.cwent.com>
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> Cy Schubert wrote:
> > >  I used to have some setuids CGIs running with my 2.1.5 fbsdbox, and
> > > them executed pretty well with Apache 1.1.1 & Perl 5.002.
> > > 
> > > Now, I upgraded to 2.2-RELEASE, Apache 1.2b7 & Perl 5.003, and none of
> > > the setuids cgis run (being executed  by anybody but root). When I
> > > remove from them the setuid flag, they can be executed (but I need to
> > > execute them as setuids). Any Ideas? Thanx in advance...
> > 
> > This is a Perl problem.  I've encountered this with other Perl (5.003)
> > scripts before, though I don't know what the solution is yet.
> > 
> The problem is that the port does not setup perl to do suid scripts.  You
> have to enable this in the configure script.

The FreeBSD Perl 5.003 port does turn on the setuid emulation, however it
still doesn't work.

> 
> > 
> > Cy Schubert                      Fax:  (250)387-5766
> 
> Gary


Regards,                       Phone:  (250)387-8437
Cy Schubert                      Fax:  (250)387-5766
UNIX Support                   OV/VM:  BCSC02(CSCHUBER)
ITSD                          BITNET:  CSCHUBER@BCSC02.BITNET
Government of BC            Internet:  cschuber@uumail.gov.bc.ca
                                       cschuber@bcsc02.gov.bc.ca

                "Quit spooling around, JES do it."