From owner-freebsd-security Mon Jan 14 1:37:45 2002 Delivered-To: freebsd-security@freebsd.org Received: from dreamflow.nl (dreamflow.nl [62.58.36.22]) by hub.freebsd.org (Postfix) with SMTP id 4C39237B422 for ; Mon, 14 Jan 2002 01:37:36 -0800 (PST) Received: (qmail 3626 invoked by uid 1000); 14 Jan 2002 09:37:33 -0000 Date: Mon, 14 Jan 2002 10:37:33 +0100 From: Bart Matthaei To: Rik Cc: freebsd-security@freebsd.org Subject: Re: suidperl Message-ID: <20020114103733.G94021@heresy.dreamflow.nl> References: <077f01c19b41$7cf205a0$6500a8c0@halenet.com.au> <20020112204404.A455@raven.robbins.dropbear.id.au> <20020113002822.GA28482@spoon.pkl.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="gKMricLos+KVdGMg" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20020113002822.GA28482@spoon.pkl.net>; from freebsd-security@rikrose.net on Sun, Jan 13, 2002 at 12:28:22AM +0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --gKMricLos+KVdGMg Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jan 13, 2002 at 12:28:22AM +0000, Rik wrote: > Which raises the question, what use is suidperl without the suid bit? I > can't recall ever having used it, and I can't recall any scripts I know > of that use it... so, uhm, what's the point? It used to be suid on linux distro's. Until some critical vulnerabilities were found. suidperl is useful for maintenance scripts who are called by normal users (or, for instance, the www-user, if the script is called from a webbased maintenance system). Regards, Bart --=20 Bart Matthaei bart@dreamflow.nl=20 "The whacky morning DJ says democracy's a joke" --gKMricLos+KVdGMg Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8Qqbdgcc6pR+tCegRAnnSAKC0pjR3n7gU2kf/nlR19qpcESHSGACgvyxV NwnuB6t9UVcK10lRPJnVL6g= =g+P0 -----END PGP SIGNATURE----- --gKMricLos+KVdGMg-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message