Re: perl setuid/suid and "use MODULE"

2010-04-29 Thread David Lee
Dermot wrote: [...] Would perlsec help?[1] I'm asking because it looks to me like taint checks are on so every path you use will need to be un-tainted before it's used. I'm not if it would improve matters to explicitly import $Bin from FindBin, EG: use FindBin qw($Bin); use lib qq($Bin/../); If

Re: perl setuid/suid and "use MODULE"

2010-04-28 Thread Dermot
On 28 April 2010 09:45, David Lee wrote: > Briefly: Hi, Unfortunately I can't offer you any inspired way to open that port. > I have tried to put as much as reasonably possible of the application into > local CPAN-like modules, with just the initial C wrapper and small perl > script outside th

perl setuid/suid and "use MODULE"

2010-04-28 Thread David Lee
Briefly: Although I'm reasonably comfortable (though certainly not expert) with perl scripts running under a setuid C wrapper, and am familiar with "Programming Perl (3rd edition)" on the topic, nothing in my searches seems to help when the script wishes to do a "use MODULE::NAME", and when t