Re: sudo in Const::Fast

2012-07-20 Thread David Cantrell
On Fri, Jul 20, 2012 at 11:03:43AM +0100, Smylers wrote: > The puzzle is now where this is coming from, given that you couldn't > find "sudo" in your cpan config files. This should answer that question ... $ cpan ... cpan[1]> o conf commit commit: wrote '/etc/perl/CPAN/Config.pm' -- David Cant

Re: sudo in Const::Fast

2012-07-20 Thread Smylers
Shawn H Corey writes: > On 12-07-19 01:07 PM, Smylers wrote: > > > Please can you run: > > > >$ cpan -J | grep sudo > > 'mbuild_install_build_command' => 'sudo ./Build', > 'make_install_make_command' => 'sudo /usr/bin/make', Great, so we've found where s

Re: no sudo in Const::Fast

2012-07-19 Thread Fields, Christopher J
As alluded to before by Serguei, 'make_install_make_command' had sudo, as well as 'mbuild_install_build_command'. Talk to your sysadmin (unless you are that person, then people will think you are crazy for talking to yourself). (...and retitling this thread appropriately) chris On Jul 19, 201

Re: sudo in Const::Fast

2012-07-19 Thread Shawn H Corey
On 12-07-19 01:07 PM, Smylers wrote: Please can you run: $ cpan -J | grep sudo 'mbuild_install_build_command' => 'sudo ./Build', 'make_install_make_command' => 'sudo /usr/bin/make', and: $ env | egrep -i 'perl|sudo' MANPATH=/home/shawn/perl5/perl

Re: sudo in Const::Fast

2012-07-19 Thread Smylers
Shawn H Corey writes: > On 12-07-19 11:34 AM, Smylers wrote: > > > Do you have a file called ~/.cpan/CPAN/MyConfig.pm? If so, are there > > any lines mentioning sudo in there? > > No, none. Well that rules out one possibility, so we must be getting closer! Please can you run: $ cpan -J | gr

Re: sudo in Const::Fast

2012-07-19 Thread Shawn H Corey
On 12-07-19 11:34 AM, Smylers wrote: Do you have a file called ~/.cpan/CPAN/MyConfig.pm? If so, are there any lines mentioning sudo in there? No, none. The only config files that have it are: ./perlbrew/build/perl-5.16.0/cpan/CPANPLUS/lib/CPANPLUS/Config.pm ./perlbrew/build/perl-5.16.0/lib/CPAN

Re: sudo in Const::Fast

2012-07-19 Thread Smylers
re there more? > > > > Like others have already said, I'm not using sudo in Const::Fast. It > > has a very boring and default installer. If you had checked the > > Makefile.PL or tried installing it without a cpan client you would > > have realized this ;-) > &

Re: sudo in Const::Fast

2012-07-19 Thread Shawn H Corey
On 12-07-19 10:43 AM, Leon Timmermans wrote: On Thu, Jul 19, 2012 at 1:38 AM, Shawn H Corey wrote: I tried installing Const::Fast and it runs sudo. Why is such a blatant security risk in a CPAN module? And are there more? Like others have already said, I'm not using sudo in Const::Fas

Re: sudo in Const::Fast

2012-07-19 Thread Leon Timmermans
On Thu, Jul 19, 2012 at 1:38 AM, Shawn H Corey wrote: > I tried installing Const::Fast and it runs sudo. Why is such a blatant > security risk in a CPAN module? And are there more? Like others have already said, I'm not using sudo in Const::Fast. It has a very boring and default in

Re: sudo in Const::Fast

2012-07-18 Thread Serguei Trouchelle
Shawn H Corey wrote: which uses sudo to install the module The point is that sudo should _never_ be used inside any module or script. Ever! So why did you put it in your "make_install_make_command" CPAN configuration variable then? -- S.T.

Re: sudo in Const::Fast

2012-07-18 Thread Fields, Christopher J
On Jul 18, 2012, at 6:29 PM, Shawn H Corey wrote: > On 12-07-18 07:12 PM, John M. Gamble wrote: >> which uses sudo to install the module > > The point is that sudo should _never_ be used inside any module or script. > Ever! > -- > Just my 0.0002 million dollars worth, > Shawn That's fine

Re: sudo in Const::Fast

2012-07-18 Thread Shawn H Corey
On 12-07-18 07:12 PM, John M. Gamble wrote: which uses sudo to install the module The point is that sudo should _never_ be used inside any module or script. Ever! -- Just my 0.0002 million dollars worth, Shawn Programming is as much about organization and communication as it is about

Re: sudo in Const::Fast

2012-07-18 Thread John M. Gamble
Hmm. Looking at the INSTALL file, there's this: ## Installation with cpanm If you have cpanm, you only need one line: % cpanm Const::Fast If you are installing into a system-wide directory, you may need to pass the "-S" flag to cpanm, which uses sudo to install the module: % cpanm -S C

Re: sudo in Const::Fast

2012-07-18 Thread Matthew Musgrove
I can't reproduce that behavior. [nms@nmsdev1 ~]$ cpan Const::Fast CPAN: Storable loaded ok (v2.22) Going to read '/home/nms/.cpan/Metadata' Database was generated on Tue, 17 Apr 2012 03:19:03 GMT CPAN: LWP::UserAgent loaded ok (v5.835) CPAN: Time::HiRes loaded ok (v1.9721) Fetching with LWP: ft

Re: sudo in Const::Fast

2012-07-18 Thread Shawn H Corey
On 12-07-18 06:44 PM, Matthew Musgrove wrote: I'm sure Leon will pipe in soon but in the mean time, what version did you install and how? The only use of sudo I see in Const-Fast-0.011 is in the INSTALL text file. $ cpan Const::Fast CPAN: Storable loaded ok (v2.35) Reading '/home/shawn/.local/s

Re: sudo in Const::Fast

2012-07-18 Thread Matthew Musgrove
I'm sure Leon will pipe in soon but in the mean time, what version did you install and how? The only use of sudo I see in Const-Fast-0.011 is in the INSTALL text file. Matt On Wed, Jul 18, 2012 at 5:38 PM, Shawn H Corey wrote: > I tried installing Const::Fast and it runs sudo. Why is such a bla

sudo in Const::Fast

2012-07-18 Thread Shawn H Corey
I tried installing Const::Fast and it runs sudo. Why is such a blatant security risk in a CPAN module? And are there more? -- Just my 0.0002 million dollars worth, Shawn Programming is as much about organization and communication as it is about coding. _Perl links_ official site