Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 01 Aug 1997 18:27:32 -0700
From:      "Jordan K. Hubbard" <jkh@time.cdrom.com>
To:        Tom Samplonius <tom@sdf.com>
Cc:        Ben Black <black@zen.cypher.net>, Sergio Lenzi <lenzi@bsi.com.br>, hackers@FreeBSD.ORG
Subject:   Re: security hole on FreeBSD 2.2.2 
Message-ID:  <9160.870485252@time.cdrom.com>
In-Reply-To: Your message of "Fri, 01 Aug 1997 17:18:48 PDT." <Pine.BSF.3.95q.970801171806.8042B-100000@misery.sdf.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
>   But what the hell is superl?  I don't think it comes with 2.2.2.

I think he meant sperl, e.g. suidperl.  Trusting perl to run as
root strikes me as horrendously risky in any case, and perhaps
it's time for us to just turn the damn thing off.  The next bug
is only a security advisory away, I'm sure.

					Jordan



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9160.870485252>