hi,

I'm really struggling with this and i would very pleased if you could 
help me.

I'm using a perl script to extend snmp functionality.

As you already now, when snmp "passes" the control to the perl script, 
it enables the flag "-T" . Therefore, the problem is that i can't use 
any tainted var inside the script.

so... i want to do things like this:

***********
 my $path = $ARGV[3];

chown 0, 0, "/tmp/$path";
***********

and perl complains that the var is "tainted".

I perfectly understand that... and all the security reasons to work like 
that... but....

1. how can i "untain" that var?
2. can i modify the way that snmp works to disable that "-T" flag when 
it passes the control to the perl script?

i've tried to untain the var with any means i've found, like this one:

*********
$path =~ s/;//g;
*********

but none has worked so far.

do you have any ideas?

Thank you very much.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to