Re: perl-suidperl no longer available in Fedora 14

Johan Cwiklinski <[email protected]>
Newsgroups gmane.comp.sysutils.backup.backuppc.devel
Message-ID <[email protected]>
 Hi,

Le 03/07/2010 11:08, Evren Yurtesen a écrit :
> On 7/3/2010 11:14 AM, Johan Cwiklinski wrote:
>> Hello,
>>
>> I've just been warned about "perl-suidperl" will no longer be available
>> in Fedora 14 :
>> https://bugzilla.redhat.com/show_bug.cgi?id=611009
>>
>> I'd like to know how I can make BackupPC work without that component ;
>> I'm really not familiar with suid issues at all...
>>
>> Any advices?
>>
>> I have already sent this message to the user list ; but that should be
>> more relevant here I guess :)
>>
> I think this only effects the cgi operation from web, you can run the 
> cgi as backuppc user by configuring in apache or do not use fedora 
> anymore. For example FreeBSD ports give an option to select if you want 
> suid used or not.

The issue is not directly related to Fedora, but to Perl itself. As far
as I understand, Perl 5.12 will remove support for suidperl, not
considered safe by developpers.

> As an alternative, you can put the suid bit yourself I guess, unless if 
> this breaks some security checks based on some compile time arguments in 
> perl for some reason, I dont know if that is the case or not.

The most important point is that I build backuppc RPM on official Fedora
repositories ; not only for myself. I have to use a really generic
solution, I'm not looking at a hack for my personal BackupPC's usage.

On the bugzilla report, someone tells me to use a C wrapper. I'll first
use that solution to keep BackupPC in repositories for F-14 and greater.
On the other hand, if perl remove this component, BackupPC code will
have to be adapted for Linux distributions (I've already found another
thread on the same subject from Debian guys) ; and I'd prefer to include
an "official" hack in the package rather than mine :)

> Thanks,
> Evren

Regards,
Johan

------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
BackupPC-devel mailing list
[email protected]
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-devel
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.