|
Hi,
I'm using Razor-check with setuid.
I get the following error :
"Insecure dependency in open while running setuid
at /usr/lib/perl5/site_perl/5.6.1/i386-linux/Razor2/Client/Config.pm line 404,
<GEN0> line 1".
I added following lines to avoid this
:
config.pm (l.398)
+ $fn =~ /^(.+)$/;
+ $fn = $1;
By this way, the $fn become an untainted variable
for perl.
if you have another solution ...
Alain M.
|
