in reply to Perl "PERLIO_DEBUG" Privilege Escalation Vulnerabilities

Solution:
Only grant trusted users access to affected systems.

There's another one - don't use setuid root perl scripts. They are the Unix equivalent of the Trusted Zone in Win32, with the same inherent structural issues.

Being right, does not endow the right to be rude; politeness costs nothing.
Being unknowing, is not the same as being stupid.
Expressing a contrary opinion, whether to the individual or the group, is more often a sign of deeper thought than of cantankerous belligerence.
Do not mistake your goals as the only goals; your opinion as the only opinion; your confidence as correctness. Saying you know better is not the same as explaining you know better.

  • Comment on Re: Perl "PERLIO_DEBUG" Privilege Escalation Vulnerabilities