[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: suid-perl



According to Michael Stone:
> Quoting Wichert Akkerman (wakkerma@cs.leidenuniv.nl):
> > What perl-suid should do is check the mountoptions for the filesystem on
> > which the script resides and abort if that was mounted with nosuid.
> > Should be quite simple actually..
> 
> But that's still not general enough. For example, you just missed the
> case of noexec... The solution should be done at a higher level, IMHO...

Every OS has a different set of mount options that may or may not be
relevant to setuid security.  I don't see what 'higher level' would be
useful.
-- 
Chip Salzenberg      - a.k.a. -      <chip@perlsupport.com>
      "When do you work?"   "Whenever I'm not busy."


Reply to: