in reply to Re: redirect STDOUT from system() function
in thread redirect STDOUT from system() function

hi

nope i can't use backticks as the script is running setuid...
says the $ENV{path} is insecur
would be a bad idea anyway....
  • Comment on Re: Re: redirect STDOUT from system() function

Replies are listed 'Best First'.
Re: Re: Re: redirect STDOUT from system() function
by chromatic (Archbishop) on Aug 10, 2001 at 22:53 UTC
    Either way, Perl spawns a system call. You'll have to untaint a couple of things in %ENV. For example, this fails: 
    #!/usr/bin/perl -wT
use strict;

# delete $ENV{qw( BASH_ENV PATH )};

my $output = `/bin/ls`;
print "Output is ($output)\n";

    [download]
    Uncommenting the appropriate line makes it work, at least on my box. Depending on what's tainted, you may have to do a little more work.
[reply]
[d/l]
[select]

In Section Seekers of Perl Wisdom