[perl #61592] 5.8.9 won't run suid program

On Mon Dec 22 07:26:41 2008, nicholas wrote:
> Thanks for the bug report.
> 
> On Sun, Dec 21, 2008 at 09:30:26PM -0800, fc@fc.freebsd.org (via RT)
> wrote:
> 
> > Built 5.8.9 from source with conditions identical to those under
> which our
> > internet hosting provider built the 5.8.7 under which their suid-cgi
> > control panel operates correctly.
> >
> > But the resulting perl5.8.9 would not run the control panel.  The
> following
> > error message was produced in error_log: 'suidperl needs (suid) fd
> script'.
> >
> > grep told me that the message was in perl.c.  An inspection of the
> code
> > just preceding the error message revealed that a line had been
> changed
> > incorrectly between 5.8.8 and 5.8.9:
> >
> > in perl.c in release 5.8.9, line 3727 is        if (*suidscript) {
> >                                       should be if (*suidscript !=
> 1) {
> >
> > Making this change, rebuilding perl, and restarting Apache makes the
> > control panel operate correcty.
> >
> > Releasing a simple clerical error like this does not speak well for
> the
> > testing of the suidperl feature, but there's a rumor it's
> deprecated.
> 
> 
> Yes, suidperl is deprecated, and, that does appear to be the correct
> fix for
> a refactoring made in January this year.
> 
> You are correct that it suggests that the suidperl is under tested. We
> know
> that our tests are not perfect, and suidperl is impossible to test
> with
> conventional regression tests, as it requires access to root
> privileges.
> 
> However, in the 4 weeks and two release candidates for 5.8.9 it seems
> that
> no-one who relies on this feature chose to actually test their code
> with
> the upcoming Perl code.
> 
> Had anyone who needed it actually tested it, this bug would have been
> averted.
> 
> Nicholas Clark
> 


Nicholas,

I suspect we should have closed this ticket four years ago.  Do you agree?

Thank you very much.
Jim Keenan

---
via perlbug:  queue: perl5 status: open
https://rt.perl.org:443/rt3/Ticket/Display.html?id=61592

• [perl #61592] 5.8.9 won't run suid program by James E Keenan via RT
• Re: [perl #61592] 5.8.9 won't run suid program by Nicholas Clark