SETID in kernel

[Jeff LaCoursiere]

I did deinstall and reinstall, and even checked the Config output to make 
sure it was answering the question "Do you want to enable SUID emulation" 
correctly, which it was.  So I am reasonably certain that the perl install 
is good.  Anyone know how to check it?  perl -V doesn't mention anything 
about it...

There is no "suidperl" in this instance - openwebmail seems to want to 
use "speedy-suidperl", which exists, and by default seems to be setuid 
itself.  If I try to run this way I get the error message abouth the 
kernel.  If I take off the SUID bit openwebmail runs without privs, and 
cannot open its own log file.

Sigh.

j

On Wed, 19 Apr 2006 17:49:31 +0100, Kevin O'Connor wrote
> No need, just check that /usr/local/bin/suidperl actually exists. 
> From the last time I installed Openwebmail (On 6) I seem to recall 
> having a problem actually getting perl to compile correctly with 
> that option and had to do several make deinstall make clean etc. I 
> don't actually think -denable_suidperl is correct  I think it was -
> enable_suidperl. If I can find my notes on the install I'll post 
> what I did.
> 
> Regards 
> Kevin
> 
> > -----Original Message-----
> > From: freebsd-users-admin at uk.freebsd.org 
> > [mailto:freebsd-users-admin at uk.freebsd.org] On Behalf Of Jeff 
> > LaCoursiere
> > Sent: Wednesday, April 19, 2006 5:30 PM
> > To: freebsd users
> > Subject: SETID in kernel
> > 
> > 
> > Howdy,
> > 
> > I feel kind of like an idiot, but I have been beating my head 
> > against a wall now for an hour with no luck.  Hope someone 
> > just knows this.
> > 
> > Trying to get openwebmail running on FreeBSD 6.1.  I am 
> > running into the famous SETUID issue with perl scripts, where I get:
> > 
> > YOU HAVEN'T DISABLED SET-ID SCRIPTS IN THE KERNEL YET!
> > FIX YOUR KERNEL, PUT A C WRAPPER AROUND THIS SCRIPT, OR USE 
> > -u AND UNDUMP!
> > 
> > I rebuilt perl with -DENABLE_SUIDPERL and installed it, but 
> > then read later that the SUID emulation will not function if 
> > the kernel still has the feature enabled.
> > 
> > Here is where I am stuck.  How do I disable it in the kernel? 
> >  I couldn't find anything in the GENERIC kernel config file 
> > (or any other config file is /usr/src/sys/i386/conf) that has 
> > anything to do with this.  Used to be a LINT config file in 
> > there that had all the possible options, but this seems to be 
> > a thing of the past.  I tried searching the handbook and got 
> > nowehere.  I tried using Google but got nowhere...
> > 
> > help!
> > 
> > Thanks!
> > 
> > j
> > 
> > ------ FreeBSD UK Users' Group  -  Mailing List ------ 
> > http://listserver.uk.freebsd.org/mailman/listinfo/freebsd-users
> >
> 
> ------ FreeBSD UK Users' Group  -  Mailing List ------
> http://listserver.uk.freebsd.org/mailman/listinfo/freebsd-users
> 
> !DSPAM:44466abe263682954162261!


--
Open WebMail Project (http://openwebmail.org)