SETID in kernel
jeff at jeff.net
Wed Apr 19 18:13:53 BST 2006
I did deinstall and reinstall, and even checked the Config output to make
sure it was answering the question "Do you want to enable SUID emulation"
correctly, which it was. So I am reasonably certain that the perl install
is good. Anyone know how to check it? perl -V doesn't mention anything
There is no "suidperl" in this instance - openwebmail seems to want to
use "speedy-suidperl", which exists, and by default seems to be setuid
itself. If I try to run this way I get the error message abouth the
kernel. If I take off the SUID bit openwebmail runs without privs, and
cannot open its own log file.
On Wed, 19 Apr 2006 17:49:31 +0100, Kevin O'Connor wrote
> No need, just check that /usr/local/bin/suidperl actually exists.
> From the last time I installed Openwebmail (On 6) I seem to recall
> having a problem actually getting perl to compile correctly with
> that option and had to do several make deinstall make clean etc. I
> don't actually think -denable_suidperl is correct I think it was -
> enable_suidperl. If I can find my notes on the install I'll post
> what I did.
> > -----Original Message-----
> > From: freebsd-users-admin at uk.freebsd.org
> > [mailto:freebsd-users-admin at uk.freebsd.org] On Behalf Of Jeff
> > LaCoursiere
> > Sent: Wednesday, April 19, 2006 5:30 PM
> > To: freebsd users
> > Subject: SETID in kernel
> > Howdy,
> > I feel kind of like an idiot, but I have been beating my head
> > against a wall now for an hour with no luck. Hope someone
> > just knows this.
> > Trying to get openwebmail running on FreeBSD 6.1. I am
> > running into the famous SETUID issue with perl scripts, where I get:
> > YOU HAVEN'T DISABLED SET-ID SCRIPTS IN THE KERNEL YET!
> > FIX YOUR KERNEL, PUT A C WRAPPER AROUND THIS SCRIPT, OR USE
> > -u AND UNDUMP!
> > I rebuilt perl with -DENABLE_SUIDPERL and installed it, but
> > then read later that the SUID emulation will not function if
> > the kernel still has the feature enabled.
> > Here is where I am stuck. How do I disable it in the kernel?
> > I couldn't find anything in the GENERIC kernel config file
> > (or any other config file is /usr/src/sys/i386/conf) that has
> > anything to do with this. Used to be a LINT config file in
> > there that had all the possible options, but this seems to be
> > a thing of the past. I tried searching the handbook and got
> > nowehere. I tried using Google but got nowhere...
> > help!
> > Thanks!
> > j
> > ------ FreeBSD UK Users' Group - Mailing List ------
> > http://listserver.uk.freebsd.org/mailman/listinfo/freebsd-users
> ------ FreeBSD UK Users' Group - Mailing List ------
Open WebMail Project (http://openwebmail.org)
More information about the Ukfreebsd