Re: suid-perl
According to Michael Stone:
> Quoting Wichert Akkerman (wakkerma@cs.leidenuniv.nl):
> > What perl-suid should do is check the mountoptions for the filesystem on
> > which the script resides and abort if that was mounted with nosuid.
> > Should be quite simple actually..
>
> But that's still not general enough. For example, you just missed the
> case of noexec... The solution should be done at a higher level, IMHO...
Every OS has a different set of mount options that may or may not be
relevant to setuid security. I don't see what 'higher level' would be
useful.
--
Chip Salzenberg - a.k.a. - <chip@perlsupport.com>
"When do you work?" "Whenever I'm not busy."
Reply to: