Discussion:
Perl-suidperl
Jeremy
2005-06-20 17:56:50 UTC
Permalink
All,

I'm looking to install 'openwebmail' on my Trustix 2.2 box.
Perl-suidperl is required but not compiled into perl5.8.5. What is the
best way to enable suidperl without going out and rebuilding from
source. If rebuilding is the only way, what other compile time options
will I need to set to make it as close to the TSL build as possible?

Thanks in advance,
Jeremy
Pierluigi Di Lorenzo
2005-06-21 08:25:08 UTC
Permalink
Post by Jeremy
All,
I'm looking to install 'openwebmail' on my Trustix 2.2 box.
Perl-suidperl is required but not compiled into perl5.8.5. What is the
best way to enable suidperl without going out and rebuilding from
source.
I had same problem with qmail-scanner, I think rebuilding perl from source
is the only way
Post by Jeremy
If rebuilding is the only way, what other compile time options
will I need to set to make it as close to the TSL build as possible?
Thanks in advance,
Jeremy
_______________________________________________
tsl-discuss mailing list
http://lists.trustix.org/mailman/listinfo/tsl-discuss
--
Pierluigi Di Lorenzo
ePrometeus s.r.l
Christian Haugan Toldnes
2005-06-27 08:40:27 UTC
Permalink
Post by Jeremy
All,
I'm looking to install 'openwebmail' on my Trustix 2.2 box.
Perl-suidperl is required but not compiled into perl5.8.5. What is the
best way to enable suidperl without going out and rebuilding from
source. If rebuilding is the only way, what other compile time options
will I need to set to make it as close to the TSL build as possible?
In perl 5.8 the suid-perl stuff is included in the normal perl code.
This means that it's not possible to both have a non-suid perl and
suid-perl installed at the same time, since suid-perl is a symlink to
perl which then has to be suid.

Since we want to have a non-suid perl available, we decided to not build
perl as suid.

For web applications you probably can do with the suexec feature of
apache. The easiest way is to set up a separate user for openwebmail,
and place the cgis in /home/users/openwebmain/public_html/cgi-bin/.

A clever apache redirect is then all you need to move from:

openwebmail.example.com/~openwebmail/ to plain openwebmail.example.com/


kind regards


c
--
Christian H. Toldnes
Trustix Developer
Loading...