From owner-freebsd-questions Thu May 10 5:13:57 2001 Delivered-To: freebsd-questions@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-32.dsl.lsan03.pacbell.net [63.207.60.32]) by hub.freebsd.org (Postfix) with ESMTP id 38E2A37B423 for ; Thu, 10 May 2001 05:13:53 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id E2C3E66C04; Thu, 10 May 2001 05:13:52 -0700 (PDT) Date: Thu, 10 May 2001 05:13:52 -0700 From: Kris Kennaway To: Donald Burr of Borg Cc: FreeBSD Questions Subject: Re: What happened to setuid perl scripts? Message-ID: <20010510051352.A2516@xor.obsecurity.org> References: <20010509140107.R64464-100000@localhost> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="zYM0uCDKw75PZbzx" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010509140107.R64464-100000@localhost>; from dburr@borg-cube.com on Wed, May 09, 2001 at 02:06:33PM -0700 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --zYM0uCDKw75PZbzx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, May 09, 2001 at 02:06:33PM -0700, Donald Burr of Borg wrote: > I used to, even up through (early) 4.3-RC, be able to run setuid perl > scripts. This past weekend, I remade world with 4.3-RELEASE. I made NO > changes to /etc/make.conf or anything else. Now, my setuid perl scripts > no longer work; they say "can't do setuid". >=20 > I read through /etc/defaults/make.conf and found the "ENABLE_SUIDPERL" > variable. Sure enough, upon checking my > /etc/make.conf, I have "ENABLE_SUIDPERL=3DTRUE" in there. >=20 > Is there something I'm doing wrong here, or has suid-ness in perl been > irrevocably turned off, and there's nothing I can do about it? The suidperl binary hasn't been installed setuid by default for something like 6 months. Just put back the setuid bit if you want/need it, and turn on ENABLE_SUIDPERL if you intend to rebuild perl from sources so you don't have to do it every time. Kris --zYM0uCDKw75PZbzx Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.5 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6+oYAWry0BWjoQKURAiLoAKDUIotkigbNhoFEW4OzkvoBficxcACgoJrU XqxJzTsXfBBP+iknpotxcAE= =XV22 -----END PGP SIGNATURE----- --zYM0uCDKw75PZbzx-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message