summaryrefslogtreecommitdiff
path: root/pod/perlsec.pod
diff options
context:
space:
mode:
authorJarkko Hietaniemi <jhi@iki.fi>2000-08-14 14:08:28 +0000
committerJarkko Hietaniemi <jhi@iki.fi>2000-08-14 14:08:28 +0000
commit0325b4c4b7ee03ae5602904f2a8f8c7254d59b1b (patch)
treedb267340f71bb0f6d130629998bccf12b022770b /pod/perlsec.pod
parent3170649431eb5688b22560d1c824cf4b7252a79c (diff)
downloadperl-0325b4c4b7ee03ae5602904f2a8f8c7254d59b1b.tar.gz
Drop the eg/ mentions and also mention the recent suidperl thing.
p4raw-id: //depot/perl@6617
Diffstat (limited to 'pod/perlsec.pod')
-rw-r--r--pod/perlsec.pod11
1 files changed, 2 insertions, 9 deletions
diff --git a/pod/perlsec.pod b/pod/perlsec.pod
index 4185e84803..6b50b92f96 100644
--- a/pod/perlsec.pod
+++ b/pod/perlsec.pod
@@ -291,12 +291,6 @@ in C:
Compile this wrapper into a binary executable and then make I<it> rather
than your script setuid or setgid.
-See the program B<wrapsuid> in the F<eg> directory of your Perl
-distribution for a convenient way to do this automatically for all your
-setuid Perl programs. It moves setuid scripts into files with the same
-name plus a leading dot, and then compiles a wrapper like the one above
-for each of them.
-
In recent years, vendors have begun to supply systems free of this
inherent security bug. On such systems, when the kernel passes the name
of the set-id script to open to the interpreter, rather than using a
@@ -308,9 +302,8 @@ program that builds Perl tries to figure this out for itself, so you
should never have to specify this yourself. Most modern releases of
SysVr4 and BSD 4.4 use this approach to avoid the kernel race condition.
-Prior to release 5.003 of Perl, a bug in the code of B<suidperl> could
-introduce a security hole in systems compiled with strict POSIX
-compliance.
+Prior to release 5.6.1 of Perl, bugs in the code of B<suidperl> could
+introduce a security hole.
=head2 Protecting Your Programs