Hi, > Just wondering what do you need suid perl for?
To run a Perl script that needs to get root privileges. > it is a security risk having it? It is always a risk to have a powerfull tool installed when you don't need it. If a security bug is discovered in Perl, one could be able to become root without you wanting it. > Is the risk that if the webserver/webserver-app gets comprimised the > user could use perl? It depends on whatyou are running on your server. If you don't need setuid perl, do not install it :)) Olivier _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
