Recommendation:  Do NOT put the "standard" (post version 5, for example.
That is the one that had the networking additions) on that system.  There
exist versions with the primary "risky" functions removed yet still allow
report processing (example:  taintperl).

The report processor on ANS Interlock, for example, is a "safety" PERL.

Jim

_______________________
The opinions expressed above are my own.  The facts simply are and belong to
none. 
James W. Meritt, CISSP, CISA
Senior Secure Systems Engineer at Wang Government Services, Inc.
> ------------------------------
> 
> Date: Tue, 14 Mar 2000 10:40:53 +0800
> From: "Kempter, Lynda L." <[EMAIL PROTECTED]>
> Subject: Perl on firewall
> 
> To perl, or not to perl; that is the question.  Literally.
> 
> A request has been made to install perl on the firewall.  (It
> would run some system audit routines, bring it in line with the 
> rest of the internal unix systems.)  > 
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to