Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 May 1997 22:36:30 +0800 (WST)
From:      Adrian Chadd <adrian@obiwan.psinet.net.au>
To:        Michael Smith <msmith@atrad.adelaide.edu.au>
Cc:        Amancio Hasty <hasty@rah.star-gate.com>, freebsd-hackers@FreeBSD.ORG
Subject:   Re: project: editor
Message-ID:  <Pine.BSF.3.95q.970515223118.8137B-100000@obiwan.psinet.net.au>
In-Reply-To: <199705130207.LAA12389@genesis.atrad.adelaide.edu.au>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tue, 13 May 1997, Michael Smith wrote:

> I think that Tcl 8.0 is in the same state as Perl 5 - waiting for the
> final release.  I can't see any serious value in going to 7.6 given that
> it would be outdated so quickly.

*nod*

Thats why I noticed even in light of the recent security problems with
suidperl in v4.x and 5 up until the "latest" (i forget which one, I don't
use suidperl anyway), -current (someone wanna check releng , etc?) at
least STILL builds setuid perl.

...
root@obiwan:/usr/src/gnu/usr.bin/perl/sperl# cat Makefile

[snip]

BINOWN= root
BINMODE=4111

[snip]

I have this little file called "unixholes".. FreeBSD has "suidperl ==
chmod 000 /usr/bin/suidperl) as the first entry. :)

I *could* be wrong, but if I'm not could someone please at least look at
disabling setuid perl until the latest 5.00x version enters the source
tree? I love telling people how "secure" FreeBSD is .. then this comes
along. :-)

Cya,

Adrian.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.970515223118.8137B-100000>