Bug 69970 - update port: www/p5-CGI-SpeedyCGI
Summary: update port: www/p5-CGI-SpeedyCGI
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Lars Thegler
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-08-04 01:50 UTC by Yen-Ming Lee
Modified: 2004-08-06 18:37 UTC (History)
0 users

See Also:


Attachments
p5-CGI-SpeedyCGI.diff (1.72 KB, patch)
2004-08-04 01:50 UTC, Yen-Ming Lee
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Yen-Ming Lee 2004-08-04 01:50:20 UTC
Perl 5.8.4 and above add several security check when doing setuid.
One of these checks is that the interpreter must have string "perl" with it.

http://sourceforge.net/mailarchive/forum.php?thread_id=4823748&forum_id=7581

- rename speedy_suid to speedy_suidperl (or speedyperl_suid will be fine, too)
- utilize ECHO
- replace all /usr/local with PREFIX will cause some problems when PREFIX
  isn't /usr/local (missing PERL5 libraries and modules... blah blah...)
- bump PORTREVISION

How-To-Repeat: 
Run a setuid script under perl 5.8.4 or above, says openwebmail.
Comment 1 Anton Berezin freebsd_committer freebsd_triage 2004-08-04 08:25:45 UTC
Responsible Changed
From-To: freebsd-ports-bugs->lth

Over to maintainer.
Comment 2 Yen-Ming Lee freebsd_committer freebsd_triage 2004-08-06 18:37:06 UTC
State Changed
From-To: open->closed

Committed, thanks.