use.perl doesn't make a valid symlink to suidperl in /usr/bin. According to perl584delta: <CITE> suidperl less insecure Paul Szabo has analysed and patched "suidperl" to remove existing known insecurities. Currently there are no known holes in "suidperl", but previous experience shows that we cannot be confident that these were the last. You may no longer invoke the set uid perl directly, so to preserve backwards compatibility with scripts that invoke #!/usr/bin/suidperl the only set uid binary is now "sperl5.8."n ("sperl5.8.4" for this release). "suidperl" is installed as a hard link to "perl"; both "suidperl" and "perl" will invoke "sperl5.8.4" automat- ically the set uid binary, so this change should be completely trans- parent. </CITE> It is much more accurate to: ln -sf /usr/local/sbin/suidperl /usr/bin/suidperl How-To-Repeat: make ENABLE_SUIDPERL=yes install Try to run anything suidperl...
Responsible Changed From-To: freebsd-ports-bugs->tobez Grab.
State Changed From-To: open->feedback Would not it be easier to move "suidperl" from special_link_list to link_list to achieve the same effect?
State Changed From-To: feedback->closed A different fix to the same problem was made on 24-Jun-05, files/use.perl revision 1.11. Thanks!