Suidperl?

I’m attempting to install rt 2.0.14 on a NetBSD 1.5.2 machine.
Apparently NetBSD does not support suidperl, so it isn’t directly
available from the usual sources …

So far I’ve looked through the install docs, the FAQ and some of
the archives of this list and everything I’ve read seems to assume
that it’s available …

My question is whether or not I need it … if I can run the CGI stuff
as the rt user from Apache (by running an instance of Apache as the rt
user) and all the housekeeping stuff from the rt crontab, why would I
need it (apart from mail stuff)?

Would I be able to take the approach that majordomo uses and set up a
small C setuid wrapper which would call specific scripts with specific
arguments?

is this feasible?

Malcolm Herbert This brain intentionally
mjch@mjch.net left blank

I’m attempting to install rt 2.0.14 on a NetBSD 1.5.2 machine.

You have my sympathies :wink:

Apparently NetBSD does not support suidperl, so it isn’t directly
available from the usual sources …

The NetBSD default perl is not compiled with suid support. You can get
support (or so I’ve seen) by recompiling perl with the appropriate magic
flags. However, you do not need suidperl.

My question is whether or not I need it … if I can run the CGI stuff
as the rt user from Apache (by running an instance of Apache as the rt
user) and all the housekeeping stuff from the rt crontab, why would I
need it (apart from mail stuff)?

You still don’t need it for the mail stuff. Search for ‘suid’ or
‘procmail’ in RT/FM.

( Sorry if I’m harping a point here, but suid scripts are a curse, and
should never be allowed in a production environment. Then again,
general security is one of my RL jobs )

Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm

Regards,

                         Bruce Campbell                            RIPE
               Systems/Network Engineer                             NCC
             www.ripe.net - PGP562C8B1B             Operations/Security