From owner-freebsd-questions@FreeBSD.ORG Mon Sep 25 12:55:50 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CDDC716A49E for ; Mon, 25 Sep 2006 12:55:50 +0000 (UTC) (envelope-from bcook@poklib.org) Received: from c.mx.poklib.org (c.mx.poklib.org [64.72.87.254]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7A1A643D45 for ; Mon, 25 Sep 2006 12:55:46 +0000 (GMT) (envelope-from bcook@poklib.org) Received: from [192.168.1.249] (port=62382 helo=mail.poklib.org) by c.mx.poklib.org with esmtps (TLSv1:AES256-SHA:256) (Exim 4.62; FreeBSD) (envelope-from ) id 1GRpzp-000LL2-QV for freebsd-questions@freebsd.org ; Mon, 25 Sep 2006 08:55:41 -0400 Received: from [192.168.1.218] by mail.poklib.org with esmtp (Exim 4.60; FreeBSD) (envelope-from ) id 1GRpzs-000Gg8-RB for freebsd-questions@freebsd.org ; Mon, 25 Sep 2006 08:55:44 -0400 X-Virus-Check: ClamAV 0.88.4/1942 on c.mx.poklib.org; Mon, 25 Sep 2006 08:55:41 -0400 Message-ID: <4517D1D0.3080703@poklib.org> Date: Mon, 25 Sep 2006 08:55:44 -0400 From: "B. Cook" Organization: Adriance Memorial Library User-Agent: Thunderbird 1.5.0.7 (Windows/20060909) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-RcvHost: [192.168.1.218] X-RcvFor: X-Auth-Id: X-AntiVirus: No Virus Found X-MIME-Character-set: ISO-8859-1 Subject: When to use SUID Perl (5.8.x)? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Sep 2006 12:55:50 -0000 Hello, Just wondering what do you need suid perl for? I run a webserver for staff users, and have had no real need for it, and considering removing it. I think it goes to back the days when SA (possibly?) needed it and I just cp'd the make.conf across boxes over the years.. :) it is a security risk having it? Is the risk that if the webserver/webserver-app gets comprimised the user could use perl? Thanks in advance.