Re: Bug#220486: Acknowledgement (perl-suid: suidperl security)
On Tue, Feb 17, 2004 at 11:50:33AM +1100, Paul Szabo wrote:
> As noted in that discussion, you cannot allow suidperl to open anything as
> root. Kindly use the patch I provided to swap UIDs before open; or better,
> the patch to open in perl then pass /dev/fd/XXX to suidperl; see also the
> patches I am "pushing" (and discussion) on perl5-porters@perl.org .
I cannot follow the discussion; this update had been pending for some time
and had to be released in its current state (which is no worse). Once you
and upstream have come to an agreement about a permanent and proper fix, by
all means forward it on to us.
--
- mdz
Reply to: