diff -rc perl5.004_04.dist/patchlevel.h perl5.004_04/patchlevel.h *** perl5.004_04.dist/patchlevel.h Wed Oct 15 12:55:19 1997 --- perl5.004_04/patchlevel.h Tue Aug 8 03:10:03 2000 *************** *** 39,44 **** --- 39,45 ---- /* The following line and terminating '};' are read by perlbug.PL. Don't alter. */ static char *local_patches[] = { NULL + ,"SUIDMAIL - fixes for suidperl security" ,NULL }; diff -rc perl5.004_04.dist/perl.c perl5.004_04/perl.c *** perl5.004_04.dist/perl.c Tue Oct 14 21:09:18 1997 --- perl5.004_04/perl.c Mon Aug 7 21:37:51 2000 *************** *** 2039,2054 **** if (tmpstatbuf.st_dev != statbuf.st_dev || tmpstatbuf.st_ino != statbuf.st_ino) { (void)PerlIO_close(rsfp); - if (rsfp = my_popen("/bin/mail root","w")) { /* heh, heh */ - PerlIO_printf(rsfp, - "User %ld tried to run dev %ld ino %ld in place of dev %ld ino %ld!\n\ - (Filename of set-id script was %s, uid %ld gid %ld.)\n\nSincerely,\nperl\n", - (long)uid,(long)tmpstatbuf.st_dev, (long)tmpstatbuf.st_ino, - (long)statbuf.st_dev, (long)statbuf.st_ino, - SvPVX(GvSV(curcop->cop_filegv)), - (long)statbuf.st_uid, (long)statbuf.st_gid); - (void)my_pclose(rsfp); - } croak("Permission denied\n"); } if ( --- 2039,2044 ----