Beefy Boxes and Bandwidth Generously Provided by pair Networks
Do you know where your variables are?
 
PerlMonks  

Taint is always on and I don't know why?

by willjones (Sexton)
on Sep 26, 2008 at 19:23 UTC ( #713934=perlquestion: print w/replies, xml ) Need Help??

willjones has asked for the wisdom of the Perl Monks concerning the following question:

I have checked the httpd.conf file and the perl.conf file that Apache uses and the PerlSwitches -T line is commented out. I did a grep for any file with the word 'taint' ignoring case, but couldn't uncover anything new. I have checked the individual script files and #/usr/bin/perl does not have a -T on it. However, for some reason I am still running in taint mode. I don't understand why? How can I control this? Is there another way of turning taint mode on/off globally for all files? Anyone have an idea as to why my files are still running in taint mode?

Thanks...
  • Comment on Taint is always on and I don't know why?

Replies are listed 'Best First'.
Re: Taint is always on and I don't know why?
by moritz (Cardinal) on Sep 26, 2008 at 19:34 UTC
    The easiest explanation is that you forgot to restart your web server, and that the old configuration (with PerlSwitches -T not commented out) is still in effect.

    There are other reasons why taint checking might be performed, all of which are documented in perlsec. A common reason is the setuid or setgid bit in the permission mask of the script.

Re: Taint is always on and I don't know why?
by Lawliet (Curate) on Sep 26, 2008 at 19:28 UTC

    How do you know that taint mode is on?

    I'm so adjective, I verb nouns!

    chomp; # nom nom nom

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: perlquestion [id://713934]
Approved by graff
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others romping around the Monastery: (7)
As of 2020-06-02 09:11 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    Do you really want to know if there is extraterrestrial life?



    Results (16 votes). Check out past polls.

    Notices?