Marc Haber wrote:
> What is the current recommended way to run perl scripts suid?

Ever since that warning was added to perl-suid, many years ago, I've
been writing my own suid wrappers for perl scripts in C.

> Why is perl-suid going away, and how am I supposed to replace its
> functionality?

Well, it has a history of security holes, many of which can be
attributed to it trying to be a general purpose suid wrapper to a
language with a fairly complex external interface.

Nice thing about writing a special-purpose wrapper instead is it's much
easier to verify that it's secure. Of course the downside is that only
people capable of writing secure C code need apply..

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature

Reply via email to