Your message dated Mon, 23 Jul 2012 22:50:59 +0200
with message-id <[email protected]>
and subject line Re: Bug#628042: perl: file creation in suid Perl script no
longer works
has caused the Debian Bug report #629251,
regarding release-notes: document that suidperl is no longer available in wheezy
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
629251: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629251
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: perl
Version: 5.12.3-6
Severity: important
After the upgrade to perl 5.12, a file creation in a suid Perl script
no longer works. AFAIK the perl upgrade isn't supposed to introduce
backward incompatible changes (at least nothing was announced).
My script is the following:
-rwsr-sr-x 1 news news 5535 2006-03-10 13:25:34 /usr/local/bin/rpnews
It contains:
#!/usr/bin/perl -T
[...]
$< = $>; # set real to effective uid
$ENV{'PATH'} = '/usr/local/bin:/usr/bin:/bin:/usr/local/sbin:/usr/sbin:/sbin';
my $news = '/var/spool/news';
my $lock = "$news/rpnews.lock";
open LOCK, ">$lock" or die "$proc: can't create lock file\n$!\n";
and when running it as a normal user, I get the error:
rpnews: can't create lock file
Permission denied
zsh: exit 13 rpnews
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (900, 'testing'), (900, 'stable'), (500, 'oldstable'), (200,
'unstable')
Architecture: powerpc (ppc)
Kernel: Linux 2.6.26-1-powerpc
Locale: LANG=POSIX, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages perl depends on:
ii libbz2-1.0 1.0.5-6 high-quality block-sorting file co
ii libc6 2.11.2-7 Embedded GNU C Library: Shared lib
ii libdb5.1 5.1.25-1 Berkeley v5.1 Database Libraries [
ii libgdbm3 1.8.3-9 GNU dbm database routines (runtime
ii perl-base 5.12.3-6 minimal Perl system
ii perl-modules 5.12.3-6 Core Perl modules
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
Versions of packages perl recommends:
ii netbase 4.44 Basic TCP/IP networking system
Versions of packages perl suggests:
ii libterm-readline-gnu-perl 1.20-1+b2 Perl extension for the GNU ReadLin
ii libterm-readline-perl-perl 1.0303-1 Perl implementation of Readline li
ii make 3.81-8.1 An utility for Directing compilati
ii perl-doc 5.12.3-6 Perl documentation
-- no debconf information
--- End Message ---
--- Begin Message ---
On Sat, Jun 4, 2011 at 22:53:16 +0100, Dominic Hargreaves wrote:
> On Fri, May 27, 2011 at 03:04:49PM +0300, Niko Tyni wrote:
> > I think README.Debian and release notes may have to do. Maybe we should
> > bring this up on debian-devel to get other opinions.
>
> Yes, I agree that this only affects a small minority of users and
> so we shouldn't have a noisy news item.
>
> I've added a note to README.Debian and cloned this bug to release-notes,
> and am CCing this to -devel for any other opinions.
>
Added to the release notes for wheezy in
http://anonscm.debian.org/viewvc/ddp/manuals/trunk/release-notes/en/issues.dbk?r1=9265&r2=9266
Should be visible soon at
http://www.debian.org/releases/wheezy/amd64/release-notes/ch-information.en.html
Cheers,
Julien
signature.asc
Description: Digital signature
--- End Message ---
