[LFS Trac] #1721: Perl ./Configure can leak information from chroot environment

LFS Trac trac at linuxfromscratch.org
Tue Mar 21 11:06:37 PST 2006


#1721: Perl ./Configure can leak information from chroot environment
-------------------------------------+--------------------------------------
 Reporter:  martyman99999 at yahoo.com  |        Owner:  lfs-book at linuxfromscratch.org
     Type:  defect                   |       Status:  closed                       
 Priority:  normal                   |    Milestone:                               
Component:  Book                     |      Version:  SVN                          
 Severity:  normal                   |   Resolution:  invalid                      
 Keywords:                           |  
-------------------------------------+--------------------------------------
Comment (by dbn.lists at gmail.com):

 According to my grepping of the perl installed files, the hostname is
 added into /usr/lib/perl5/5.8.8/i686-linux/Config_heavy.pl and
 /usr/lib/perl5/5.8.8/i686-linux/CORE/config.h

 Here's the output:

 {{{
 $ for F in $(paco -fzx perl); do
 grep -H 'anduin' $F 2>/dev/null
 done
 /usr/lib/perl5/5.8.8/i686-linux/Config_heavy.pl:## Target system     :
 linux anduin 2.6.10-1 #1 tue jan 18 06:22:56 cst 2005 i686 athlon-4 i386
 gnulinux
 /usr/lib/perl5/5.8.8/i686-linux/Config_heavy.pl:cf_email='root at anduin.nonet'
 /usr/lib/perl5/5.8.8/i686-linux/Config_heavy.pl:myhostname='anduin'
 /usr/lib/perl5/5.8.8/i686-linux/Config_heavy.pl:myuname='linux anduin
 2.6.10-1 #1 tue jan 18 06:22:56 cst 2005 i686 athlon-4 i386 gnulinux '
 /usr/lib/perl5/5.8.8/i686-linux/Config_heavy.pl:perladmin='root at anduin.nonet'
 /usr/lib/perl5/5.8.8/i686-linux/CORE/config.h: * Target system     : linux
 anduin 2.6.10-1 #1 tue jan 18 06:22:56 cst 2005 i686 athlon-4 i386
 gnulinux
 }}}

 The config.h inclusion is in a comment, so it has no effect.
 Config_heavy.pl is a bit more troublesome, but as Archaic says, it's only
 cosmetic.  A note could be added that Config_heavy.pl contains host
 information and can be updated with information for the final system.

-- 
Ticket URL: <http://wiki.linuxfromscratch.org/lfs/ticket/1721>
LFS Trac <http://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.



More information about the lfs-book mailing list