When to use SUID Perl (5.8.x)?

[Olivier Nicole]

Hi, 

> Just wondering what do you need suid perl for?

To run a Perl script that needs to get root privileges.

> it is a security risk having it?

It is always a risk to have a powerfull tool installed when you don't
need it. If a security bug is discovered in Perl, one could be able to
become root without you wanting it.

> Is the risk that if the webserver/webserver-app gets comprimised the 
> user could use perl?

It depends on whatyou are running on your server.

If you don't need setuid perl, do not install it :))

Olivier