[rt-users] Problem with taint checking and larger binary attachments
Brian McClendon
bam at intrinsic.com
Fri Oct 26 13:28:48 EDT 2001
I have rt-2.0.7 installed on RH6.2 and am fighting with two
attachment issues. One is a bug, the other a design need:
1) incoming customer mails with attachments sometimes work
and sometimes don't. I can't figure out a pattern (except
perhaps failing ones are larger, but still much smaller
than the default 10M limit). The messages I get in the
rt.log.xxxx file when receiving a single 2.1M attachment are:
Insecure dependency in eval while running with -T switch at /usr/lib/perl5/site_perl/5.6.0/Text/Template.pm line 315, <STDIN> line 30256.
Insecure dependency in eval while running with -T switch at /usr/lib/perl5/site_perl/5.6.0/Text/Template.pm line 315, <STDIN> line 30256.
It would appear that somehow attachments are being taint
checked (and I can't see how to disable this, since nowhere
can I find it being enabled).
Also, the same file can't be attached thru the web interface.
2) There is no way to send an email correspondance to a customer
that contains an attachment. That seems wrong, but reading
the rt-users history, that is the current design. The last
message I saw asked if the mod written by ?? met with Jesse's
approval. Does it?
BTW, other than the large number of CPAN dependencies, setting
up RT was very easy and it appears to be a VERY powerful
product. Good job!
--
--------------------------------------------------------
Brian McClendon bam at intrinsic.com 650-966-6804
--------------------------------------------------------
More information about the rt-users
mailing list