in reply to Problems with Sys::Syslog and taint
It's required that you untaint the ENV{PATH} when you run any system command line apps via system, exec ot anything of that nature.
Doing:
Doing:
Works like mdillon pointed out. It's actually better than what I was using which was:local %ENV = (PATH => '/bin');
His code will clear out ENV before it sets that path. Anyhow, localizing ENV and setting the PATH is required for tainted scripts that use system calls. This makes sure you don't have some path in the ENV that you don't know about and can be explioted by others.local $ENV{'PATH'} = '/bin';
-- philip
We put the 'K' in kwality!
|
---|
Replies are listed 'Best First'. | |
---|---|
RE: Re: Problems with Sys::Syslog and taint
by mdillon (Priest) on May 16, 2000 at 02:01 UTC | |
by guice (Scribe) on May 16, 2000 at 19:57 UTC |
In Section
Seekers of Perl Wisdom