I'm not entirely sure but I think you need to sanitise your PATH. Have you
done that?
BEGIN {
$ENV {'PATH'} = '/bin:/usr/bin';
$ENV {'SHELL'} = '/bin/sh';
delete $ENV {'ENV';
}
It makes sure that nothing wonky can happen while running in setuid mode.
"-T" is checking to make sure that your environment isn't tainted and if you
don't explicitly define your PATH it assumes it is. (That's my
interpretation anyway)
Colin
> -----Original Message-----
> From: Sean Gray [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, December 10, 2002 4:03 PM
> To: Abe Loveless
> Cc: 'e-smith-devinfo'
> Subject: Re: [e-smith-devinfo] Custom panel error
>
>
> You could try removing the -T from the first line of the
> offending perl script.
>
> Sean
>
> Quoting Abe Loveless <[EMAIL PROTECTED]>:
>
> >
> > I'm working on a custom panel for the mkCDrec package.
> > http://mkcdrec.ota.be/project/index.html
> >
> > One of my sub-routines returns this error from the server-manager.
> >
> > <ERROR>
> > Software error:
> > Insecure dependency in system while running with -T switch at
> > /etc/e-smith/web/panels/manager/cgi-bin/mkcdrec line 278.
> >
> > For help, please send mail to the webmaster
> > ([EMAIL PROTECTED]), giving this error message
> and the time
> > and date of the error.
> > </ERROR>
> >
> >
> > The devinfo archive didn't return any results. (at lease "insecure
> > dependency" didn't)
> >
> > The forum's returned this thread:
> > http://www.e-smith.org/bboard//read.php?v=t&f=1&i=1235&t=1216
> >
> > The forum thread references an e-smith 4.0 bug.
> >
> >
> > The line referenced in the error is the following:
> > system ("/bin/rm -f /opt/utilities/mkcdrec/backup_archive/".
> > $iso) == 0
> > or die ("Error occurred while removing ". $iso ."\n");
> >
> > I'm trying to delete the backup iso image from my backup archive.
> >
> >
> > Any thoughts on what this error refers to, or where I can
> go to find the
> > answer?
> >
> > Thanks,
> > Abe
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.427 / Virus Database: 240 - Release Date: 12/6/2002
> >
> >
> >
> > --
> > Please report bugs to [EMAIL PROTECTED]
> > Please mail [EMAIL PROTECTED] (only) to discuss security issues
> > Support for registered customers and partners to
> [EMAIL PROTECTED]
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > Searchable archive at
> > http://www.mail-archive.com/devinfo%40lists.e-smith.org
> >
> >
>
>
>
>
> --
> Please report bugs to [EMAIL PROTECTED]
> Please mail [EMAIL PROTECTED] (only) to discuss security issues
> Support for registered customers and partners to [EMAIL PROTECTED]
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Searchable archive at
http://www.mail-archive.com/devinfo%40lists.e-smith.org
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Searchable archive at http://www.mail-archive.com/devinfo%40lists.e-smith.org
