[rt-users] webmux.pl - Insecure dependency in chdir while running with -T switch

[Schincke, Keith D. (JSC-IT)[DB Consulting Group, Inc.]]

My typo. It should have been "perl module".

Is the path to/usr/lib/perl5/5.10.1/File/Path.pm readable by the apache user? Each of the directories should be 755 with the perl module being 644.

I sometimes get DAG modules installing with a 750 and 640 respectively. Everything passes as root but fails as a user.

Keith
________________________________________
From: rt-users-bounces at lists.bestpractical.com [rt-users-bounces at lists.bestpractical.com] On Behalf Of Kim Pedersen [lists at kimp.org]
Sent: Tuesday, January 18, 2011 12:48 AM
Cc: rt-users at lists.bestpractical.com
Subject: Re: [rt-users] webmux.pl - Insecure dependency in chdir while running with -T switch

Hi Keith,

I am not sure I understand 100% what permissions to the "perl mode" means.

But the line calling File::Path in /usr/sbin/webmux.pl refers to "$RT::MasonDataDir", which points to /var/cache/rt/mason_data/.

The content and permissions of that folder is the following:

drwxrwx--- 5 apache apache 38 2011-01-18 01:06 ./
drwxr-xr-x 4 root   root   42 2011-01-18 01:06 ../
drwxrwx--- 2 apache apache  6 2011-01-18 01:06 cache/
drwxrwx--- 2 apache apache  6 2011-01-18 01:06 etc/
drwxrwx--- 3 apache apache 50 2011-01-18 01:06 obj/

The "obj" dir has session related files in it (That are recreated by apache if I empty the folders) all created by apache, and apache also has the permissions to delete the files


It looks like webmux.pl is trying to clean out the /var/cache/rt/mason_data/obj folder and failing for some reason, with "Insecure dependency in mkdir while running with -T switch at /usr/lib/perl5/5.10.1/File/Path.pm line 108, line 2. "

if ( $ENV{'MOD_PERL'} && !RT->Config->Get('DevelMode')) {
    # Under static_source, we need to purge the component cache
    # each time we restart, so newer components may be reloaded.
    #
    # We can't do this in FastCGI or we'll blow away the component
    # root _every_ time a new server starts which happens every few
    # hits.

    require File::Path;
    require File::Glob;
    my @files = File::Glob::bsd_glob("$RT::MasonDataDir/obj/*");
    File::Path::rmtree([ @files ], 0, 1) if @files;
}

1;


Kim P




On 2011-01-18 02:32, Schincke, Keith D. (JSC-IT)[DB Consulting Group, Inc.] wrote:
What are the directory permissions to the perl mode?
One of the directories or the Path.pm file may not allow the web process to access the file.

Keith


Sent from my Verizon Wireless Phone

----- Reply message -----
From: "Kim Pedersen" <lists at kimp.org><mailto:lists at kimp.org>
Date: Mon, Jan 17, 2011 11:28 pm
Subject: [rt-users] webmux.pl - Insecure dependency in chdir while running with -T switch
To: "rt-users at lists.bestpractical.com"<mailto:rt-users at lists.bestpractical.com> <rt-users at lists.bestpractical.com><mailto:rt-users at lists.bestpractical.com>


Hi everyone,.

I am installing a cloned copy of our live 3.8.8 RT installation (To test
a restoration/reinstallation and later to play with the 3.9.4 release).

The new server is running Apache 2.2.15 with mod_perl 2.0.4 on Mandriva
2010.1 x64, with Postgresql 9.0 - which is the same as the live server.

And the RT version is installed from RPM (built from a modified Mandriva
.spec file, updated to work with 3.8.8)

After installing RT I can't start Apache any longer and I am stuck with
the following problem in my apache log:

[error] Insecure dependency in chdir while running with -T switch at
/usr/lib/perl5/5.10.1/File/Path.pm line 250.\nCompilation failed in
require at (eval 2) line 1.\n
[error] Can't load Perl file: /usr/sbin/webmux.pl for server
www.testserver.com:0<http://www.testserver.com:0>, exiting...


If I run webmux.pl manually as root, there are no Perl errors. A "make
testdeps" from the RT sources show all dependencies being okay as well.
The RT config files are the same as on the live server -  File::Path is
called at the end of webmux.pl, but I am just lost for what to look for
/ how to troubleshoot this.


Any hints / pointers?


Regards

Kim P