Bug#521584: perl-suid: -U no longer behaves as expected to allow insecure operations

Adam Kessel ajkessel at debian.org
Tue Mar 31 19:10:40 UTC 2009


Niko Tyni wrote, on 3/31/2009 11:58 AM:
> I don't see anything wrong with perl here, please let me know what
> to do with this bug.

I think I've figured out the cause. One of the standard 
modules--presumably Config.pm--is calling 
/usr/lib/perl/5.10/Config_heavy.pl. Because it is a separate script and 
not a .pm, it isn't "inheriting" the -U session, and thus the  calling 
script is dying. I'm not sure if this is really a bug or not, but if 
it's not, I'm not sure how I would work around it.






More information about the Perl-maintainers mailing list