Path: usenet.cis.ufl.edu!usenet.eel.ufl.edu!pacifier!rainrgnews0!gasco!nntp.teleport.com!usenet From: mbeattie@sable.ox.ac.uk (Malcolm Beattie) Newsgroups: comp.lang.perl.announce,comp.lang.perl.misc Subject: Announcing safecgiperl beta1 Followup-To: comp.lang.perl.misc Date: 2 Nov 1995 16:40:47 GMT Organization: Oxford University, England Lines: 31 Approved: merlyn@stonehenge.com (comp.lang.perl.announce) Message-ID: <47asaf$gao@maureen.teleport.com> NNTP-Posting-Host: kelly.teleport.com Keywords: Safe CGI Perl X-Disclaimer: The "Approved" header verifies header information for article transmission and does not imply approval of content. Xref: usenet.cis.ufl.edu comp.lang.perl.announce:172 comp.lang.perl.misc:10618 Announcing safecgiperl beta1. This distribution is intended to be installed on a World Wide Web server and allows CGI programs written in Perl5 to be run in a sanitised environment. It makes use of the Safe extension module for Perl5--any attempted unsafe operation in the CGI program is trapped and causes a fatal compile-time error. Wrappers and utility functions for useful but potentially unsafe operations (such as opening files and sending mail) can be written in (unrestricted) perl and then shared with the sanitised compartment. Pre-requisites are perl5.001m and the Safe extension module. Earlier patchlevels of perl5.001 than perl5.001m are possible but not recommended. The Safe extension module is available from its home site as ftp://ftp.ox.ac.uk/pub/perl/Safe-b2.tar.gz or from perl mirror sites. The safecgiperl distribution contains two programs (a small C program to be run setuid root by the web server and a perl program cgiperl which creates a sanitised Safe compartment in which to run the CGI program) and a bit of documentation. Availability: ftp://ftp.ox.ac.uk/pub/perl/safecgiperl-b1.tar.gz --Malcolm -- Malcolm Beattie Oxford University Computing Services "Widget. It's got a widget. A lovely widget. A widget it has got." --Jack Dee .