Re: perl privilege drop

2019-07-25 Thread Andrew Hewus Fresh
On Thu, Jul 25, 2019 at 09:35:44AM -0600, Theo de Raadt wrote: > Andrew Hewus Fresh wrote: > > https://perldoc.perl.org/5.30.0/functions/chroot.html > > > NOTE: It is good security practice to do chdir("/") > > > (chdir to the root directory) immediately after a chroot. > > > > The phrasing "goo

Re: perl privilege drop

2019-07-25 Thread Theo de Raadt
Andrew Hewus Fresh wrote: > On Thu, Jul 25, 2019 at 07:16:27AM -0500, Edgar Pettijohn wrote: > > > > On Jul 24, 2019 9:06 PM, Andrew Hewus Fresh wrote: > > > > > > On Sat, Jul 20, 2019 at 07:20:23PM -0500, Edgar Pettijohn wrote: > > > > Is there a standard OpenBSD approved method for dropping p

Re: perl privilege drop

2019-07-25 Thread Andrew Hewus Fresh
On Thu, Jul 25, 2019 at 07:16:27AM -0500, Edgar Pettijohn wrote: > > On Jul 24, 2019 9:06 PM, Andrew Hewus Fresh wrote: > > > > On Sat, Jul 20, 2019 at 07:20:23PM -0500, Edgar Pettijohn wrote: > > > Is there a standard OpenBSD approved method for dropping privileges in > > > a perl server? Curren

Re: perl privilege drop

2019-07-25 Thread Edgar Pettijohn
On Jul 24, 2019 9:06 PM, Andrew Hewus Fresh wrote: > > On Sat, Jul 20, 2019 at 07:20:23PM -0500, Edgar Pettijohn wrote: > > Is there a standard OpenBSD approved method for dropping privileges in > > a perl server? Currently looking into Privileges::Drop, but since it > > isn't in base makes me c

Re: perl privilege drop

2019-07-24 Thread Andrew Hewus Fresh
On Sat, Jul 20, 2019 at 07:20:23PM -0500, Edgar Pettijohn wrote: > Is there a standard OpenBSD approved method for dropping privileges in > a perl server? Currently looking into Privileges::Drop, but since it > isn't in base makes me curious if there is a better way. It's relatively easy to do it

perl privilege drop

2019-07-20 Thread Edgar Pettijohn
Is there a standard OpenBSD approved method for dropping privileges in a perl server? Currently looking into Privileges::Drop, but since it isn't in base makes me curious if there is a better way. Thanks, Edgar