Re^4: suid Perl with App::PAR::Packer (pp)

[Tommy]

Dear, Anonymous Monk. I did what you asked and put the diff up as a gist on github.

It's here: https://gist.github.com/tommybutler/6970628

Please read the notes on the patch before using it, because it notes that the build helper script had to be changed in order to make it work (by removing the --clean option when calling pp). I added crypto filters to the compiled executable for better security, given that it is suid. I also put into the BEGIN block of the script an instant-exit if $< isn't my uid.

The updated (fixed) build helper script:

#!/bin/bash

sudo rm -rf /tmp/par* &&
sudo rm -rf suid_script &&
pp --output=suid_script -f Crypto -F Crypto -M Filter::Crypto::Decrypt
+ suid_script.pl &&
sudo chown root:root suid_script &&
sudo chmod +x suid_script &&
sudo chmod u+s suid_script &&
stat suid_script &&
rm -rf /tmp/par*