[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#2691: new perl break suid scripts



Package: perl
Version: 5.002-7

Apparently, there no longer is a suidperl in the perl package.

I have a simple suid script that calls netdate and clock. It worked for
weeks, but now breaks under perl 5.002-7.  Here are some details:

edd@miles:~> ls -l /usr/local/bin/call.netclock
-rwsr-x--x   1 root     staff         321 Mar 11 00:00 /usr/local/bin/call.net.clock

edd@miles:~> cat /usr/local/bin/call.netclock
#!/usr/bin/perl -- -w                   # -*-perl-*-
$ENV{'PATH'} = '/sbin:/usr/sbin:/bin:/usr/bin';
# other time servers that work are
#      "tock.usno.navy.mil", "time.nist.gov", "time.bldrdoc.gov"
system "netdate", "tcp", "knot.ccs.queensu.ca" || die("Can't call netdate,");
system "clock", "-u", "-w" || die("Can't call clock,");

edd@miles:~> /usr/local/bin/call.netclock
netdate: settimeofday: Operation not permitted
knot.ccs.queensu.ca +7.131 Mon Apr 15 07:36:43.000
clock: unable to get I/O port access

--
Dirk Eddelb"uttel                              http://qed.econ.queensu.ca/~edd



Reply to: