From owner-freebsd-questions Tue Dec 9 11:07:06 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id LAA24633 for questions-outgoing; Tue, 9 Dec 1997 11:07:06 -0800 (PST) (envelope-from owner-freebsd-questions) Received: from ohio.river.org (river.org [209.24.233.15]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id LAA24628 for ; Tue, 9 Dec 1997 11:07:05 -0800 (PST) (envelope-from dhawk@ohio.river.org) Received: (from dhawk@localhost) by ohio.river.org (8.8.8/8.7.3) id LAA17317 for questions@freebsd.org; Tue, 9 Dec 1997 11:06:58 -0800 (PST) From: David Hawkins Message-Id: <199712091906.LAA17317@ohio.river.org> Subject: suidperl 4.036 in 2.2.5? To: questions@freebsd.org Date: Tue, 9 Dec 1997 11:06:58 -0800 (PST) X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Why is this still being installed by 2.2.5? What programs use it? Is there a simple way I can do a make world after a cvsup and not have it installed? J"org posted some instructions to the freebsd.misc newsgroup but I didn't understand them. That's why I say 'simple' ;-) Any possibility 'make world' could be changed to notify the admin that insecure software has been installed and then give the steps needed to remove it? I can do it manually each time, I suppose, but newcomers aren't going to know that suidperl 4.036 isn't secure. later, david -- David Hawkins -- dhawk@river.org http://www.river.org "I write to understand as much as to be understood." -- Elie Wiesel