search for: taintperl

Displaying 2 results from an estimated 2 matches for "taintperl".

2002 Jul 09
1
strip setuid/setgid bits on backup (was Re: small security-related rsync extension)
...bvious reason not to use URL-style %-quoting, or mime-style > =-quoting, if you want to preserve ease of filtering...) > ---------- This brings up an issue that I believe can be solved in a simpler way than with brute force C code. I suspect some of you will cringe when you hear this, but a taintperl log parsing program would be best for this. rsync could generate a verbose log file that is not human readable, designed to be read by a perl postprocessing script. I think this would allow greater flexibility, and modularize the functionality to avoid some possible security problems. This way l...
2002 Jul 09
1
strip setuid/setgid bits on backup (was Re: small security-related rsync extension)
> > This brings up an issue that I believe can be solved in a simpler way than > > with brute force C code. I suspect some of you will cringe when you hear > > this, but a taintperl log parsing program would be best for this. rsync > > could generate a verbose log file that is not human readable, designed to > > be read by a perl postprocessing script. I think this would allow greater > > flexibility, and modularize the functionality to avoid some possible...