Compile pronlem with old centosls

Alejandro Martínez lists at ruby-forum.com
Tue Jun 16 22:58:16 MSD 2009


Cliff Wells wrote:
> On Tue, 2009-06-16 at 17:18 +0200, Alejandro Martínez wrote:
>> 
>> i have a perl script in /usr/include/linux/limits.h
> 
> Have you inspected this script?   I'd be concerned that this system
> might be compromised.
> 
> Regards,
> Cliff

this is what it had:

[root at s164 nginx-0.8.1]# cat /usr/include/linux/limits.h
#!/usr/bin/perl

# Copyright (C) 2003 Simon Josefsson

# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2, or (at your option)
# any later version.

# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
# 02111-1307, USA.

# I consider the output of this program to be unrestricted.  Use it as
# you will.

while (<>) {
    s, \* @(.*):, * \\param $1,g;
    print $_;
}
ct/gobject-Type-Information.html#g-type-init-with-debug-flags">
<ANCHOR id="g-type-name" 
href="gobject/gobject-Type-Information.html#g-type-name">
<ANCHOR id="g-type-qname" 
href="gobject/gobject-Type-Information.html#g-type-qname">
<ANCHOR id="g-type-from-name" 
href="gobject/gobject-Type-Information.html#g-type-from-name">
<ANCHOR id="g-type-parent" 
href="gobject/gobject-Type-Information.html#g-type-parent">
<ANCHOR id="g-type-depth" 
href="gobject/gobject-Type-Information.html#g-type-depth">
<ANCHOR id="g-type-next-base" 
href="gobject/gobject-Type-Information.html#g-type-next-base">
<ANCHOR id="g-type-is-a" 
href="gobject/gobject-Type-Information.html#g-type-is-a">
<ANCHOR id="g-type-class-ref" 
href="gobject/gobject-Type-Information.html#g-type-class-ref">
<ANCHOR id="g-type-class-peek" 
href="gobject/gobject-Type-Information.html#g-type-class-peek">
<ANCHOR id="g-type-class-peek-static" 
href="gobject/gobject-Type-Information.html#g-type-class-peek-static">
<ANCHOR id="g-type-class-unref" 
href="gobject/gobject-Type-Information.html#g-type-class-unref">
<ANCHOR id="g-type-class-peek-parent" 
href="gobject/gobject-Type-Information.html#g-type-class-peek-parent">
<ANCHOR id="g-type-class-add-private" 
href="gobject/gobject-Type-Information.html#g-type-class-add-private">
<ANCHOR id="g-type-interface-peek" 
href="gobject/gobject-Type-Information.html#g-type-interface-peek">
<ANCHOR id="g-type-interface-peek-parent" 
href="gobject/gobject-Type-Information.html#g-type-interface-peek-parent">
<ANCHOR id="g-type-default-interface-ref" 
href="gobject/gobject-Type-Information.html#g-type-default-interface-ref">
<ANCHOR id="g-type-default-interface-peek" 
href="gobject/gobject-Type-Information.html#g-type-default-interface-peek">
<ANCHOR id="g-type-default-interface-unref" 
href="gobject/gobject-Type-Information.html#g-type-default-interface-unref">
<ANCHOR id="g-type-children" 
href="gobject/gobject-Type-Information.html#g-type-children">
<ANCHOR id="g-type-interfaces" 
href="gobject/gobject-Type-Information.html#g-type-interfaces">
<ANCHOR id="g-type-interface-prerequisites" 
href="gobject/gobject-Type-Information.html#g-type-interface-prerequisites">
<ANCHOR id="g-type-set-qdata" 
href="gobject/gobject-Type-Information.html#g-type-set-qdata">
<ANCHOR id="g-type-get-qdata" 
href="gobject/gobject-Type-Information.html#g-type-get-qdata">
<ANCHOR id="g-type-query" 
href="gobject/gobject-Type-Information.html#g-type-query">
<ANCHOR id="GTypeQuery" 
href="gobject/gobject-Type-Information.html#GTypeQuery">
<ANCHOR id="GBaseInitFunc" 
href="gobject/gobject-Type-Information.html#GBaseInitFunc">
<ANCHOR id="GBaseFinalizeFunc" 
href="gobject/gobject-Type-Information.html#GBaseFinalizeFunc">
<ANCHOR id="GClassInitFunc" 
href="gobject/gobject-Type-Information.html#GClassInitFunc">
<ANCHOR id="GClassFinalizeFunc" 
href="gobject/gobject-Type-Information.html#GClassFinalizeFunc">
<ANCHOR id="GInstanceInitFunc" 
href="gobject/gobject-Type-Information.html#GInstanceInitFunc">
<ANCHOR id="GInterfaceInitFunc" 
href="gobject/gobject-Type-Information.html#GInterfaceInitFunc">
<ANCHOR id="GInterfaceFinalizeFunc" 
href="gobject/gobject-Type-Information.html#GInterfaceFinalizeFunc">
<ANCHOR id="GTypeClassCacheFunc" 
href="gobject/gobject-Type-Information.html#GTypeClassCacheFunc">
<ANCHOR id="GTypeFlags" 
href="gobject/gobject-Type-Information.html#GTypeFlags">
<ANCHOR id="GTypeFundamentalFlags" 
href="gobject/gobject-Type-Information.html#GTypeFundamentalFlags">
<ANCHOR id="g-type-register-static" 
href="gobject/gobject-Type-Information.html#g-type-register-static">
<ANCHOR id="g-type-register-dynamic" 
href="gobject/gobject-Type-Information.html#g-type-register-dynamic">
<ANCHOR id="g-type-register-fundamental" 
href="gobject/gobject-Type-Information.html#g-type-register-fundamental">
<ANCHOR id="g-type-add-interface-static" 
href="gobject/gobject-Type-Information.html#g-type-add-interface-static">
<ANCHOR id="g-type-add-interface-dynamic" 
href="gobject/gobject-Type-Information.html#g-type-add-interface-dynamic">
....... ad infinitum.

Which looks at least suspicious. I don't remember much about pearl, but 
it seems to extract domains from e-mail addresses :|.

I know very little about security, so i've escalated this to the 
sysadmins. But if anyone has any ideas or seen something like this 
before, comments or recommendations are welcome.

Thank you.
-- 
Posted via http://www.ruby-forum.com/.





More information about the nginx mailing list