Path: usenet.cis.ufl.edu!usenet.eel.ufl.edu!pacifier!rainrgnews0!gasco!nntp.teleport.com!usenet
From:
[email protected] (Malcolm Beattie)
Newsgroups: comp.lang.perl.announce,comp.lang.perl.misc
Subject: Announcing safecgiperl beta1
Followup-To: comp.lang.perl.misc
Date: 2 Nov 1995 16:40:47 GMT
Organization: Oxford University, England
Lines: 31
Approved:
[email protected] (comp.lang.perl.announce)
Message-ID: <
[email protected]>
NNTP-Posting-Host: kelly.teleport.com
Keywords: Safe CGI Perl
X-Disclaimer: The "Approved" header verifies header information for article transmission and does not imply approval of content.
Xref: usenet.cis.ufl.edu comp.lang.perl.announce:172 comp.lang.perl.misc:10618
Announcing safecgiperl beta1.
This distribution is intended to be installed on a World Wide Web
server and allows CGI programs written in Perl5 to be run in a
sanitised environment. It makes use of the Safe extension module for
Perl5--any attempted unsafe operation in the CGI program is trapped
and causes a fatal compile-time error. Wrappers and utility functions
for useful but potentially unsafe operations (such as opening files
and sending mail) can be written in (unrestricted) perl and then
shared with the sanitised compartment.
Pre-requisites are perl5.001m and the Safe extension module.
Earlier patchlevels of perl5.001 than perl5.001m are possible but
not recommended. The Safe extension module is available from its
home site as
ftp://ftp.ox.ac.uk/pub/perl/Safe-b2.tar.gz or from
perl mirror sites.
The safecgiperl distribution contains two programs (a small C program to
be run setuid root by the web server and a perl program cgiperl which
creates a sanitised Safe compartment in which to run the CGI program)
and a bit of documentation.
Availability:
ftp://ftp.ox.ac.uk/pub/perl/safecgiperl-b1.tar.gz
--Malcolm
--
Malcolm Beattie <
[email protected]>
Oxford University Computing Services
"Widget. It's got a widget. A lovely widget. A widget it has got." --Jack Dee
