Subject: | ruid and euid set in wrong order |
I believe that these lines in drop_privs():
$< = $self->uid;
$> = $self->uid;
are in the wrong order. When done this way around, the result is that
the taint flag (${^TAINT}) gets set, which if intentional, should at
least be documented here. Setting the ruid and euid the other way
around avoids turning on taint mode. Alternatively, use POSIX::setuid as
perlvar suggests.