Date: Wed, 12 Nov 2003 23:51:17 -0700 (MST) From: ausec@athabascau.ca To: freebsd-cvsweb@freebsd.org Subject: fail to spawn rlog actually a taint issue Message-ID: <22733.131.232.4.112.1068706277.squirrel@secure.athabascau.ca>
next in thread | raw e-mail | index | archive | help
I recieved the error messag "failed to spawn rlog" for a while until I
changed:
open(STDERR, '>/dev/null'); # rlog may complain; ignore.
to
open(STDERR, '>/tmp/err.txt'); # rlog may complain; ignore.
in getDirLogs, the else with:
exec($CMD{rlog}, '-r', @files) or exit -1;
The err.txt reported:
Insecure dependency in exec while running with -T switch at
cgi-bin/cvsweb.cgi line 2141
If I knew enough perl I'd change it to work correctly but for now if I
turn off taint it works Ok.
Any thoughts?
Thanks,
Ausec.
__
This communication is intended for the use of the recipient to whom it
is addressed, and may contain confidential, personal, and or privileged
information. Please contact us immediately if you are not the intended
recipient of this communication, and do not copy, distribute, or take
action relying on it. Any communications received in error, or
subsequent reply, should be deleted or destroyed.
---
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?22733.131.232.4.112.1068706277.squirrel>