Re: problems building DBD::Oracle 1.16 - help - please

From: Jared Still (jkstill_at_cybcon.com)
Date: 02/12/05

  • Next message: Ron Reidy: "RE: Cannot Insert into Oracle" 
    To: Adam Stoller <ghoti@ix.netcom.com>
Date: Fri, 11 Feb 2005 22:07:50 -0800

    On Fri, 2005-02-04 at 07:06, Adam Stoller wrote:

    > Once we fixed that, we found that with ORACLE_HOME being protected (750
    > directory access) using 'sudo make' wasn't sufficient - and we had to
    > change the access rights on ORACLE_HOME to 755
    >

    A better way to do this might be to build a version of Perl that is
    owned by the same account that owns oracle.

    Changing the permissions on ORACLE_HOME may not an acceptable method
    of working around the problem, dependent on your security policies.

    You may recall the the oracle executable is suid, so it may not be
    a good idea to make it more accessible than necessary.

    It also eliminates a lot of testing that may be needed when you
    need to upgrade Perl or modules. You won't be affecting the
    version of Perl that is used to run many system scripts.

    Jared

  • Next message: Ron Reidy: "RE: Cannot Insert into Oracle"

    Relevant Pages

    • Cpanel 5 and below remote command execution and local root vulnerabilities
      ... Cpanel is web hosting control panel which allow client manage their web account through ... Most of the application are written in perl and compiled to binary. ... Cpanel come with openwebmail packages as one of web base email reader which suid root. ...
      (Bugtraq)
    • [VulnWatch] Cpanel 5 and below remote command execution and local root vulnerabilities
      ... Cpanel is web hosting control panel which allow client manage their web account through ... Most of the application are written in perl and compiled to binary. ... Cpanel come with openwebmail packages as one of web base email reader which suid root. ...
      (VulnWatch)
    • Re: User Privilege in RH 7.3
      ... or maybe SUID Perl scripts.... ... shell script to execute arbitrary commands. ... "man perlsec" tells you all about what can happen with SUID/SGID Perl ...
      (comp.os.linux.misc)
    • Re: how to change the effective UID
      ... The suid flag exists that a process with the normal rights could take the super rights. ... The perl printed the notice, suid isn't supported, to me when I had seted the suid to $. ... to start the perl with the -u option and then to generate the true program from the dump with help the undump program. ...
      (comp.lang.perl.misc)