Re: Proc::UID test problems
On August 6, 2010, Scott Edwards wrote:
> On Fri, Aug 6, 2010 at 3:27 PM, Gordon Haverland
>
> <ghaverla@materialisations.com> wrote:
> > I wrote a program to help install a package, which makes use
> > of effective UID changes. And Proc::UID fits those
> > requirements nicely.
> >
> > On my computer (Debian/unstable), Proc::UID compiles and
> > installs fine. On another computer (Debian/stable), the
> > SUID test (04) and the SGID test (05) both fail. Installing
> > perl-suid didn't help. Any ideas what is wrong? The tests
> > fail on command lines that look like:
> >
> > system("04_test.t2");
> >
> > where the script 04_test.t2 is SUID..
>
> Last time I dabbled with suid-perl, I was informed it's
> depreciated. I'm not sure if Debian takes the same stance on
> it.
That is what I understand as well, that with perl 5.12 that suid-
perl will be deprecated. I suppose at that time, the maintainer
of Proc::UID will have to change his tests, because the suid and
sgid won't work.
But, what I am doing, by making sure it is root running the
program, and then temporarily changing the effective UID (dropping
priviledges) should still be something useful. But there seems to
be lots of details about security oriented programming which are
beyond this old FORTRAN number cruncher. :-)
Gord
Reply to: