From 0adb491a35feec8bfd58a63f42e9770d2ab661c8 Mon Sep 17 00:00:00 2001
From: Michael Lucas <mwlucas@FreeBSD.org>
Date: Mon, 14 Jan 2002 13:08:47 +0000
Subject: [PATCH] new FAQ: why suidperl isn't suid

Taken from: recent -security thread.
---
 en_US.ISO8859-1/books/faq/book.sgml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/en_US.ISO8859-1/books/faq/book.sgml b/en_US.ISO8859-1/books/faq/book.sgml
index f34ab918cb..ed483ac2c3 100644
--- a/en_US.ISO8859-1/books/faq/book.sgml
+++ b/en_US.ISO8859-1/books/faq/book.sgml
@@ -9691,6 +9691,28 @@ round-trip min/avg/max/stddev = 2.530/2.643/2.774/0.103 ms</screen>
             <username>toor</username> if you want to use it.</para>
         </answer>
       </qandaentry>
+
+      <qandaentry>
+        <question id="suidperl">
+          <para>Why is <command>suidperl</command> not working
+            properly?</para>
+        </question>
+
+        <answer>
+          <para>For security reasons, <command>suidperl</command> is
+            installed without the suid bit by default.  The system
+            administrator can enable suid behavior with the following
+            command.</para>
+
+	    <screen>&prompt.root; <userinput>chmod u+s /usr/bin/suidperl</userinput></screen>
+
+          <para>If you want <command>suidperl</command> to be built
+            suid during upgrades from source, edit
+            <filename>/etc/make.conf</filename> and add
+            <varname>ENABLE_SUIDPERL=true</varname> before you run
+            <command>make buildworld</command>.</para>
+        </answer>
+      </qandaentry>
     </qandaset>
   </chapter>