From: Jesse Vincent Date: Tue, 20 Oct 2009 14:52:07 +0000 (-0400) Subject: suidperl is no longer available. INSTALL should not say it is X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=commitdiff_plain;h=172dd9593c69d24c1273d593b8e9ca4fadf1f99c;p=p5sagit%2Fp5-mst-13.2.git suidperl is no longer available. INSTALL should not say it is --- diff --git a/INSTALL b/INSTALL index b9d1c3e..9582876 100644 --- a/INSTALL +++ b/INSTALL @@ -1315,25 +1315,9 @@ process or the Perl build process will not help you with these. =head2 suidperl -suidperl is an optional component, which is normally neither built -nor installed by default. From perlfaq1: - - On some systems, setuid and setgid scripts (scripts written - in the C shell, Bourne shell, or Perl, for example, with the - set user or group ID permissions enabled) are insecure due to - a race condition in the kernel. For those systems, Perl versions - 5 and 4 attempt to work around this vulnerability with an optional - component, a special program named suidperl, also known as sperl. - This program attempts to emulate the set-user-ID and set-group-ID - features of the kernel. - -Because of the buggy history of suidperl, and the difficulty -of properly security auditing as large and complex piece of -software as Perl, we cannot recommend using suidperl and the feature -should be considered deprecated. - -Instead, use a tool specifically designed to handle changes in -privileges, such as B. +suidperl was an optional component of earlier releases of perl. It is no +longer available. Instead, use a tool specifically designed to handle +changes in privileges, such as B. =head1 make depend