On August 6, 2010, Scott Edwards wrote: > On Fri, Aug 6, 2010 at 3:27 PM, Gordon Haverland > > <[email protected]> wrote: > > I wrote a program to help install a package, which makes use > > of effective UID changes. And Proc::UID fits those > > requirements nicely. > > > > On my computer (Debian/unstable), Proc::UID compiles and > > installs fine. On another computer (Debian/stable), the > > SUID test (04) and the SGID test (05) both fail. Installing > > perl-suid didn't help. Any ideas what is wrong? The tests > > fail on command lines that look like: > > > > system("04_test.t2"); > > > > where the script 04_test.t2 is SUID.. > > Last time I dabbled with suid-perl, I was informed it's > depreciated. I'm not sure if Debian takes the same stance on > it.
That is what I understand as well, that with perl 5.12 that suid- perl will be deprecated. I suppose at that time, the maintainer of Proc::UID will have to change his tests, because the suid and sgid won't work. But, what I am doing, by making sure it is root running the program, and then temporarily changing the effective UID (dropping priviledges) should still be something useful. But there seems to be lots of details about security oriented programming which are beyond this old FORTRAN number cruncher. :-) Gord -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
