[Qmail-scanner-general]suid perl

[Gil Disatnik]

Hello there,
Sorry if this topic has already been covered, I could not search the message archive for some reason...

Suid perl is NOT recommended anymore by perl maintainers, To quote the INSTALL file:

Because of the buggy history of suidperl, and the difficulty
of properly security auditing as large and complex piece of
software as Perl, we cannot recommend using suidperl and the feature
should be considered deprecated.
Instead use for example 'sudo': http://www.courtesan.com/sudo/

Any suggestions? slack-current comes with suidperl disabled by default, I could recompile perl enabling suid-perl, but that could really be a security hole...

Maybe we should simply wrap Qmail scanner with a wrapper script that will run the real Qmailscanner with sudo?

Thanks.



Regards

Gil Disatnik
UNIX system/security administrator.

GibsonLP@EFnet

_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
"Windows NT has detected mouse movement, you MUST restart
your computer before the new settings will take effect, [ OK ]"
--------------------------------------------------------------------
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
not stand 1 bit of competition.
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general