Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Sep 2006 08:03:30 +0700 (ICT)
From:      Olivier Nicole <>
Subject:   Re: When to use SUID Perl (5.8.x)?
Message-ID:  <>
In-Reply-To: <> (
References:  <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help

> Just wondering what do you need suid perl for?

To run a Perl script that needs to get root privileges.

> it is a security risk having it?

It is always a risk to have a powerfull tool installed when you don't
need it. If a security bug is discovered in Perl, one could be able to
become root without you wanting it.

> Is the risk that if the webserver/webserver-app gets comprimised the 
> user could use perl?

It depends on whatyou are running on your server.

If you don't need setuid perl, do not install it :))


Want to link to this message? Use this URL: <>