Shannon Werb wrote:
 What are the requirements for /usr/bin/perl rather than user/bin/suidperl?
I am running freebsd 4.7 with verion 1.21 with no problems at all, love it!
Before I upgrade how can I confirm that my system will work with
/usr/bin/perl?

My Perl information...
batt1# perl --version

This is perl, version 5.005_03 built for i386-freebsd

The best thing to do is to test it. write a simple perl script, turn on the suid bit, and run it to see what perl tells you. If you print out the contents of $> in your test script it should be the uid of the user that owns the script, not the user that is executing the script. There is even an example in the qmail-scanner tar ball that is used when you install it (it gets created when you run ./configure).


The relevant part of the perl docs (for your 'ancient' version of perl) that talk about this can be found here: http://www.perldoc.com/perl5.005_03/pod/perlsec.html

---- Here is a quote from that page ----
Perl can emulate the setuid and setgid mechanism when it notices the otherwise useless setuid/gid bits on Perl scripts. It does this via a special executable called suidperl that is automatically invoked for you if it's needed.
-----------------------------------------


Now it is also possible (but unlikely) that FreeBSD handles suid scripts securely, which means that perl doesn't need to use the suidperl program at all. But you would have to investigate that since I don't know.

Cheers,

Cees


------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to