[rt-users] Insecure dependency in eval..

Glen Gyldersleve Glen at canright.com
Wed Jan 5 17:32:30 EST 2005


So the solution (which is probably not optimal) was to comment out

# PerlTaintCheck On

In httpd.conf



Glen Gyldersleve
Account Manager
Canright Systems, Inc
(503) 968-9898 x425



> -----Original Message-----
> From: rt-users-bounces at lists.bestpractical.com 
> [mailto:rt-users-bounces at lists.bestpractical.com] On Behalf 
> Of Jesse Vincent
> Sent: Thursday, December 30, 2004 1:35 PM
> To: Glen Gyldersleve
> Cc: rt-users at lists.bestpractical.com
> Subject: Re: [rt-users] Insecure dependency in eval..
> 
> 
> What version of RT are you running? RT 3.2 and newer give you 
> new instructions about how to not run setuid, due to issues like this.
> 
> 	-jesse
> 
> 
> On Thu, Dec 30, 2004 at 11:38:33AM -0800, Glen Gyldersleve wrote:
> > I'm getting an error when trying to create a new ticket.
> > 
> > 
> > System error
> > error:  	Insecure dependency in eval while running with -T switch
> > at /usr/lib/perl5/5.8.5/Locale/Maketext/Guts.pm line 247.
> > context:  	
> > ...  	
> > 243:  	unshift @code, "use strict; sub {\n";
> > 244:  	push @code, "}\n";
> > 245:  	
> > 246:  	print @code if DEBUG;
> > 247:  	my $sub = eval(join '', @code);
> > 248:  	die "$@ while evalling" . join('', @code) if 
> $@; # Should be
> > impossible.
> > 249:  	return $sub;
> > 250:  	}
> > 251:  	
> > ...  	
> > code stack:  	/usr/lib/perl5/5.8.5/Locale/Maketext/Guts.pm:247
> > /usr/lib/perl5/5.8.5/Locale/Maketext.pm:196
> > /usr/local/rt/lib/RT/CurrentUser.pm:398
> > /usr/local/rt/lib/RT/Base.pm:119 
> > /usr/local/rt/lib/RT/Ticket_Overlay.pm:1570
> > /usr/local/rt/lib/RT/Ticket_Overlay.pm:657
> > /usr/local/rt/lib/RT/Interface/Web.pm:340
> > /usr/local/rt/share/html/Ticket/Display.html:101
> > /usr/local/rt/share/html/Ticket/Create.html:279
> > /usr/local/rt/share/html/autohandler:221	
> > 
> > Glen Gyldersleve
> > Account Manager
> > Canright Systems, Inc
> > (503) 968-9898 x425
> > 
> > _______________________________________________
> > http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> > 
> > Be sure to check out the RT wiki at http://wiki.bestpractical.com
> > 
> 
> -- 
> _______________________________________________
> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> 
> Be sure to check out the RT wiki at http://wiki.bestpractical.com
> 



More information about the rt-users mailing list