[rt-users] RT 3.0.3 cannot send mail when PerlTaint is on

Michael F Kukla kukla at buffalo.edu
Tue Jun 15 12:59:26 EDT 2004


About a year, another rt-user sent the list this message:

" I'm getting this message in my /var/log/messages on RedHat 9 when I
have PerlTaint turned on in my httpd.conf file:

Jul 7 15:53:18 it-linux1 RT: <rt-3.0.3-2-4.3.56364903072595 at somecompany.com>
Could not send mail. -Insecure $ENV{PATH} while running with -T switch at
/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm line
263.

Stack:
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm:263]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm:175]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/ScripAction_Overlay.pm:192]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Scrip_Overlay.pm:409]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Scrip_Overlay.pm:344]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Transaction_Overlay.pm:169]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Ticket_Overlay.pm:3743]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Ticket_Overlay.pm:597]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Interface/Web.pm:286]
[/export/home2/apache/intranet_html/rt-3..

Turning off PerlTaint let's email be sent just fine...."

There was not much follow-up to this, so I thought some might find it of use or
interest to note that we've encountered the same problem.

Syslog output was virtually identical to that given above; and the problem was
similarly resolved simply by removing the PerlTaint directive from httpd.conf
and fully stopping and re-starting apache.

Our apache environment and the most relevant parts of the RT config are

RedHat 9
Server version: Apache/1.3.31 (Unix)
mod_perl-1.29
RT 3.0.10

-----------------------------------------

Set($MailCommand , 'sendmailpipe');
Set($SendmailArguments , "-oi -t");


--
Mike Kukla,
Web Developer/Assistant System Administrator
University of Buffalo,
College of Arts and Sciences,
Educational Technology Node (CASet),
414 Clemens Hall





More information about the rt-users mailing list