Re: sudo in Const::Fast

2012-07-20 Thread Smylers
Shawn H Corey writes: On 12-07-19 01:07 PM, Smylers wrote: Please can you run: $ cpan -J | grep sudo 'mbuild_install_build_command' = 'sudo ./Build', 'make_install_make_command' = 'sudo /usr/bin/make', Great, so we've found where sudo is

Re: sudo in Const::Fast

2012-07-20 Thread David Cantrell
On Fri, Jul 20, 2012 at 11:03:43AM +0100, Smylers wrote: The puzzle is now where this is coming from, given that you couldn't find sudo in your cpan config files. This should answer that question ... $ cpan ... cpan[1] o conf commit commit: wrote '/etc/perl/CPAN/Config.pm' -- David Cantrell

Re: sudo in Const::Fast

2012-07-19 Thread Smylers
Shawn H Corey writes: On 12-07-19 10:43 AM, Leon Timmermans wrote: On Thu, Jul 19, 2012 at 1:38 AM, Shawn H Corey shawnhco...@gmail.com wrote: I tried installing Const::Fast and it runs sudo. Why is such a blatant security risk in a CPAN module? And are there more? Like others

Re: sudo in Const::Fast

2012-07-19 Thread Shawn H Corey
On 12-07-19 11:34 AM, Smylers wrote: Do you have a file called ~/.cpan/CPAN/MyConfig.pm? If so, are there any lines mentioning sudo in there? No, none. The only config files that have it are: ./perlbrew/build/perl-5.16.0/cpan/CPANPLUS/lib/CPANPLUS/Config.pm

Re: sudo in Const::Fast

2012-07-19 Thread Smylers
Shawn H Corey writes: On 12-07-19 11:34 AM, Smylers wrote: Do you have a file called ~/.cpan/CPAN/MyConfig.pm? If so, are there any lines mentioning sudo in there? No, none. Well that rules out one possibility, so we must be getting closer! Please can you run: $ cpan -J | grep sudo

Re: sudo in Const::Fast

2012-07-19 Thread Shawn H Corey
On 12-07-19 01:07 PM, Smylers wrote: Please can you run: $ cpan -J | grep sudo 'mbuild_install_build_command' = 'sudo ./Build', 'make_install_make_command' = 'sudo /usr/bin/make', and: $ env | egrep -i 'perl|sudo'

Re: sudo in Const::Fast

2012-07-18 Thread John M. Gamble
Hmm. Looking at the INSTALL file, there's this: ## Installation with cpanm If you have cpanm, you only need one line: % cpanm Const::Fast If you are installing into a system-wide directory, you may need to pass the -S flag to cpanm, which uses sudo to install the module: % cpanm -S

Re: sudo in Const::Fast

2012-07-18 Thread Shawn H Corey
On 12-07-18 07:12 PM, John M. Gamble wrote: which uses sudo to install the module The point is that sudo should _never_ be used inside any module or script. Ever! -- Just my 0.0002 million dollars worth, Shawn Programming is as much about organization and communication as it is

Re: sudo in Const::Fast

2012-07-18 Thread Fields, Christopher J
On Jul 18, 2012, at 6:29 PM, Shawn H Corey wrote: On 12-07-18 07:12 PM, John M. Gamble wrote: which uses sudo to install the module The point is that sudo should _never_ be used inside any module or script. Ever! -- Just my 0.0002 million dollars worth, Shawn That's fine to

Re: sudo in Const::Fast

2012-07-18 Thread Serguei Trouchelle
Shawn H Corey wrote: which uses sudo to install the module The point is that sudo should _never_ be used inside any module or script. Ever! So why did you put it in your make_install_make_command CPAN configuration variable then? -- S.T.