Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Jan 2002 10:37:33 +0100
From:      Bart Matthaei <bart@dreamflow.nl>
To:        Rik <freebsd-security@rikrose.net>
Cc:        freebsd-security@freebsd.org
Subject:   Re: suidperl
Message-ID:  <20020114103733.G94021@heresy.dreamflow.nl>
In-Reply-To: <20020113002822.GA28482@spoon.pkl.net>; from freebsd-security@rikrose.net on Sun, Jan 13, 2002 at 12:28:22AM %2B0000
References:  <077f01c19b41$7cf205a0$6500a8c0@halenet.com.au> <20020112204404.A455@raven.robbins.dropbear.id.au> <20020113002822.GA28482@spoon.pkl.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--gKMricLos+KVdGMg
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Jan 13, 2002 at 12:28:22AM +0000, Rik wrote:
> Which raises the question, what use is suidperl without the suid bit? I
> can't recall ever having used it, and I can't recall any scripts I know
> of that use it... so, uhm, what's the point?

It used to be suid on linux distro's. Until some critical
vulnerabilities were found.
suidperl is useful for maintenance scripts who are called by normal
users (or, for instance, the www-user, if the script is called from a
webbased maintenance system).


Regards,

Bart
--=20
Bart Matthaei                 bart@dreamflow.nl=20

"The whacky morning DJ says democracy's a joke"

--gKMricLos+KVdGMg
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8Qqbdgcc6pR+tCegRAnnSAKC0pjR3n7gU2kf/nlR19qpcESHSGACgvyxV
NwnuB6t9UVcK10lRPJnVL6g=
=g+P0
-----END PGP SIGNATURE-----

--gKMricLos+KVdGMg--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020114103733.G94021>