After looking around on a Solaris box for a bit, I've also come to the unfortunate conclusion that there isn't really anything you can do. There seems to be no trace of the actual command typed anywhere. ps reports the pid as running /usr/bin/perl -w /dev/fd/4, and the lack of a decent /proc system on Solaris is also a dead end. If you are forced to pick, the latter of the two choices above sounds like a safer bet... always better to not have to deal with taint-checking of any external variables in a program, especially an suid one.

In reply to Re: How to determine the program path from a set-uid program by plaid
in thread How to determine the program path from a set-uid program by ZZamboni

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.