INN commit: trunk/scripts (innupgrade.in)
INN Commit
Russ_Allbery at isc.org
Sat Jan 31 22:04:46 UTC 2009
Date: Saturday, January 31, 2009 @ 14:04:46
Author: iulius
Revision: 8314
Better explanation for the reason why innupgrade should be
taint-safe.
Modified:
trunk/scripts/innupgrade.in
---------------+
innupgrade.in | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
Modified: innupgrade.in
===================================================================
--- innupgrade.in 2009-01-31 21:08:29 UTC (rev 8313)
+++ innupgrade.in 2009-01-31 22:04:46 UTC (rev 8314)
@@ -12,9 +12,10 @@
## requires innconfval be able to parse inn.conf, and until this script runs,
## inn.conf may not be valid.
##
-## Tainting ("-T" flag to perl) is on because innupgrade can be run in that
-## mode on a few systems ("make update" does that on BSD/OS for instance).
-## Therefore, we have to be sure innupgrade is taint-safe.
+## Tainting ("-T" flag to perl) is on because innupgrade can be run as a
+## setgid program on a few systems ("*g*make update" does that for instance).
+## Therefore, we have to be sure innupgrade is taint-safe because Perl
+## will check for tainted variables when it runs a setgid script.
##
## Currently handles the following conversions:
##
More information about the inn-committers
mailing list