Beefy Boxes and Bandwidth Generously Provided by pair Networks
The stupid question is the question not asked
 
PerlMonks  

Re: Re: Re: #!$var/bin/perl

by hardburn (Abbot)
on Mar 13, 2003 at 16:21 UTC ( #242736=note: print w/ replies, xml ) Need Help??


in reply to Re: Re: #!$var/bin/perl
in thread #!$var/bin/perl

Using relitive links to executables is well known to be a security risk, because you have to assume that you might not be in control of $PATH. Notice that perl running under taint mode won't let you execute external programs until you assign $ENV{'PATH'}.

----
Reinvent a rounder wheel.

Note: All code is untested, unless otherwise stated


Comment on Re: Re: Re: #!$var/bin/perl
Replies are listed 'Best First'.
Re: Re: Re: Re: #!$var/bin/perl
by PodMaster (Abbot) on Mar 13, 2003 at 16:31 UTC
    I do not have to assume i might not be in control of $PATH if I know I am in absolute control of path.


    MJD says you can't just make shit up and expect the computer to know what you mean, retardo!
    I run a Win32 PPM repository for perl 5.6x+5.8x. I take requests.
    ** The Third rule of perl club is a statement of fact: pod is sexy.

      Sure, that's what you think. A main point of doing security is that you can never be absolutely sure. Ever.

      ----
      Reinvent a rounder wheel.

      Note: All code is untested, unless otherwise stated

        No, that's what I know. If I can't be sure what PATH is, then I can't be sure what /some/path/to/perl is either.


        MJD says you can't just make shit up and expect the computer to know what you mean, retardo!
        I run a Win32 PPM repository for perl 5.6x+5.8x. I take requests.
        ** The Third rule of perl club is a statement of fact: pod is sexy.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://242736]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others wandering the Monastery: (15)
As of 2015-07-30 14:30 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    The top three priorities of my open tasks are (in descending order of likelihood to be worked on) ...









    Results (271 votes), past polls