setuid program & funkce open

[Honza Pazdziora]

xsorm na informatics.muni.cz (Milan Sorm) writes:

> funkce open vsak zcela logicky vraci Insecure dependency (na open).
> 
> jak obejit tento paranoicky bezpecnostni mechanismus, ktery se u setuid
> skriptu spousti automaticky, aby zrovna u tohoto openu (u ktereho jsem si
> jisty spravnosti dat) vzal i "spinavou" promennou ?
> 
> diky za kazdy tip.

Man pages are your friends.

man perlsec:

	But testing for taintedness gets you only so far.  Sometimes
	you have just to clear your data's taintedness.  The only
	way to bypass the tainting mechanism is by referencing
	subpatterns from a regular expression match. ...

Doufam, ze to pomuze,

--
------------------------------------------------------------------------
 Honza Pazdziora | adelton na fi.muni.cz | http://www.fi.muni.cz/~adelton/
                   I can take or leave it if I please
------------------------------------------------------------------------