.\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.16)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  \*(C+ will
.\" give a nicer C++.  Capital omega is used to do unbreakable dashes and
.\" therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
.\" nothing in troff, for use with C<>.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.ie \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.el \{\
.    de IX
..
.\}
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "Paranoid 3pm"
.TH Paranoid 3pm "2012-05-29" "perl v5.14.2" "User Contributed Perl Documentation"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH "NAME"
Paranoid \- Paranoia support for safer programs
.SH "VERSION"
.IX Header "VERSION"
\&\f(CW$Id:\fR Paranoid.pm,v 0.34 2012/05/29 21:40:51 acorliss Exp $
.SH "SYNOPSIS"
.IX Header "SYNOPSIS"
.Vb 1
\&  use Paranoid;
\&
\&  $errMsg = Paranoid::ERROR;
\&
\&  psecureEnv("/bin:/usr/bin");
.Ve
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
This collection of modules started out as modules which perform things
(debatably) in a safer and taint-safe manner.  Since then it's also grown to
include functionality that fit into the same framework and conventions of the
original modules, including keeping the debug hooks for command-line
debugging.
.PP
All the modules below are intended to be used directly in your programs if you
need the functionality they provide.
.PP
This module does provide one function meant to secure your environment 
enough to satisfy taint-enabled programs, and as a container which holds the 
last reported error from any code in the Paranoid framework.
.SH "SUBROUTINES/METHODS"
.IX Header "SUBROUTINES/METHODS"
.SS "psecureEnv"
.IX Subsection "psecureEnv"
.Vb 1
\&  psecureEnv("/bin:/usr/bin");
.Ve
.PP
This function deletes some of the dangerous environment variables that can be
used to subvert perl when being run in setuid applications.  It also sets the
path, either to the passed argument (if passed) or a default of
\&\*(L"/bin:/usr/bin\*(R".
.SS "Paranoid::ERROR"
.IX Subsection "Paranoid::ERROR"
.Vb 2
\&  $errMsg = Paranoid::ERROR;
\&  Paranoid::ERROR = $errMsg;
.Ve
.PP
This lvalue function is not exported and must be referenced via the 
\&\fBParanoid\fR namespace.
.SH "TAINT NOTES"
.IX Header "TAINT NOTES"
Taint-mode programming can be somewhat of an adventure until you know all the
places considered dangerous under perl's taint mode.  The following functions
should generally have their arguments detainted before using:
.PP
.Vb 7
\&  exec        system      open        glob
\&  unlink      mkdir       chdir       rmdir
\&  chown       chmod       umask       utime
\&  link        symlink     kill        eval
\&  truncate    ioctl       fcntl       chroot
\&  setpgrp     setpriority syscall     socket
\&  socketpair  bind        connect
.Ve
.SH "DEPENDENCIES"
.IX Header "DEPENDENCIES"
While this module itself doesn't have any external dependencies various child
modules do.  Please check their documentation for any particulars should you
use them.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
The following modules are available for use.  You should check their \s-1POD\s0 for
specifics on use:
.IP "o" 4
.IX Item "o"
Paranoid::Args: Command-line argument parsing functions
.IP "o" 4
.IX Item "o"
Paranoid::BerkeleyDB: OO-oriented BerkelyDB access with concurrent access
capabilities
.IP "o" 4
.IX Item "o"
Paranoid::Data: Misc. data manipulation functions
.IP "o" 4
.IX Item "o"
Paranoid::Debug: Command-line debugging framework and functions
.IP "o" 4
.IX Item "o"
Paranoid::Filesystem: Filesystem operation functions
.IP "o" 4
.IX Item "o"
Paranoid::Glob: Paranoid Glob objects
.IP "o" 4
.IX Item "o"
Paranoid::Input: Input-related functions (file reading, detainting)
.IP "o" 4
.IX Item "o"
Paranoid::Lockfile: Lockfile support
.IP "o" 4
.IX Item "o"
Paranoid::Log: Unified logging framework and functions
.IP "o" 4
.IX Item "o"
Paranoid::Module: Run-time module loading functions
.IP "o" 4
.IX Item "o"
Paranoid::Network: Network-related functions
.IP "o" 4
.IX Item "o"
Paranoid::Network::IPv4: General IPv4\-related functions
.IP "o" 4
.IX Item "o"
Paranoid::Network::IPv6: General IPv6\-related functions
.IP "o" 4
.IX Item "o"
Paranoid::Network::Socket: Wrapper module for Socket & Socket6
.IP "o" 4
.IX Item "o"
Paranoid::Process: Process management functions
.SH "BUGS AND LIMITATIONS"
.IX Header "BUGS AND LIMITATIONS"
If your application is sensitive to performance issues then you may
be better off not using these modules.  The primary focus was on security,
robustness, and diagnostics.  That said, there's probably a lot of room for
improvement on the performance front.
.SH "AUTHOR"
.IX Header "AUTHOR"
Arthur Corliss (corliss@digitalmages.com)
.SH "LICENSE AND COPYRIGHT"
.IX Header "LICENSE AND COPYRIGHT"
This software is licensed under the same terms as Perl, itself. 
Please see http://dev.perl.org/licenses/ for more information.
.PP
(c) 2005, Arthur Corliss (corliss@digitalmages.com)