retitle 628042 no longer suid Perl script support
thanks

This can be seen with:

#!/usr/bin/perl -T

print "$< $>\n";

On 2011-05-27 11:33:57 +0100, Dominic Hargreaves wrote:
> Upstream removed suidperl support in 5.12. I think we should indeed
> have announced this better (although you will have seen the perl-suid
> package being removed).

First I didn't see it because I upgraded many packages. Moreover
this could have meant that suidperl were moved in the perl package.

> We don't seem to have a NEWS.Debian file in the perl package; I
> wonder if this would be a suitable place to put this information or
> whether it should eventually go somewhere like the release notes for
> wheezy.

Yes, this would be a suitable place, in particular because
apt-listchanges would have displayed the change *before* the
upgrade, and the admin/user can cancel the upgrade. This lets
the admin/user do whatever workaround is needed before the
upgrade.

I've done some search. In the announce, the reference to the
thread can be given:

  http://www.nntp.perl.org/group/perl.perl5.porters/2008/12/msg142839.html

and it would be nice to point to some howto. The thread describes
2 solutions: sudo (but this is not always possible and taint mode
isn't necessarily enabled automatically) and a C wrapper (using
execv(), I assume).

-- 
Vincent Lefèvre <[email protected]> - Web: <http://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Arénaire project (LIP, ENS-Lyon)



--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to