[rt-devel] rt 3.0.9 can't have PerlTaint turned on

[Blair Zajac]

Jesse Vincent wrote:
> 
> On Feb 20, 2004, at 4:18 PM, Blair Zajac wrote:
> 
> > Hello,
> >
> > I thought I'd try turning PerlTaint on in my httpd.conf file and
> > while the website runs, you can't send any email out:
> 
> Blair,
> 
> Hm. Aren't we forcing $ENV{'PATH'} to a safe value in webmux.pl?
> Also, I seem to recall that you spent some time looking into tainting
> in a previous release. Did this work fine in 3.0.8?
> >

Jesse,

Yes, there's this line in webmux.pl:

BEGIN {
    $ENV{'PATH'}   = '/bin:/usr/bin';          # or whatever you need

I get this error happens when I send email to the RT mail address and
it runs rt-mailgate.  I don't have a good sense of what rt-mailgate
does, but does it post the message via the web site to get the
message into the database?

I haven't tried turning on PerlTaint for a while and didn't try it
with 3.0.8.  Just thought I try today.

Best,
Blair

-- 
Blair Zajac <blair at orcaware.com>
Plots of your system's performance - http://www.orcaware.com/orca/