INN commit: trunk/scripts (innupgrade.in)

INN Commit Russ_Allbery at isc.org
Sat Jan 31 22:04:46 UTC 2009


    Date: Saturday, January 31, 2009 @ 14:04:46
  Author: iulius
Revision: 8314

Better explanation for the reason why innupgrade should be
taint-safe.

Modified:
  trunk/scripts/innupgrade.in

---------------+
 innupgrade.in |    7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

Modified: innupgrade.in
===================================================================
--- innupgrade.in	2009-01-31 21:08:29 UTC (rev 8313)
+++ innupgrade.in	2009-01-31 22:04:46 UTC (rev 8314)
@@ -12,9 +12,10 @@
 ##  requires innconfval be able to parse inn.conf, and until this script runs,
 ##  inn.conf may not be valid.
 ##
-##  Tainting ("-T" flag to perl) is on because innupgrade can be run in that
-##  mode on a few systems ("make update" does that on BSD/OS for instance).
-##  Therefore, we have to be sure innupgrade is taint-safe.
+##  Tainting ("-T" flag to perl) is on because innupgrade can be run as a
+##  setgid program on a few systems ("*g*make update" does that for instance).
+##  Therefore, we have to be sure innupgrade is taint-safe because Perl
+##  will check for tainted variables when it runs a setgid script.
 ##
 ##  Currently handles the following conversions:
 ##




More information about the inn-committers mailing list