Re: CPAN security

2007-10-13 Thread Bill Moseley
On Fri, Oct 12, 2007 at 05:50:25PM +0100, David Cantrell wrote: On Thu, Oct 11, 2007 at 06:31:28PM +0100, Andy Armstrong wrote: That doesn't stop make install doing something hoopy as root of course. Nor does it prevent the module from having this buried in it: if($ == 0) { system(rm

Re: CPAN security

2007-10-12 Thread Gabor Szabo
For that reason too I prefer to use only modules that come with my operating system. Of course it has very limited number of CPAN modules ( http://www.szabgab.com/distributions/ ) and even those can be out of date to my purposes so in many cases I install them from CPAN. For that one might

Re: CPAN security

2007-10-11 Thread Andy Armstrong
On 11 Oct 2007, at 18:23, Bill Moseley wrote: In general, I prefer to run make and make test as a normal user and then sudo make install, but sudo cpan sure is easy. But, that's hardly a complete test of code. Grab the latest CPAN, set these two options: make_install_make_command [sudo

Re: CPAN security

2007-10-11 Thread josh
On Thu, Oct 11, 2007 at 06:31:28PM +0100, Andy Armstrong wrote: } On 11 Oct 2007, at 18:23, Bill Moseley wrote: } In general, I prefer to run make and make test as a normal user and } then sudo make install, but sudo cpan sure is easy. But, that's } hardly a complete test of code. } } Grab the