Skip to Content.
Sympa Menu

en - Re: [sympa-users] Insecure dependency in open while running setuid

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Mark K <address@concealed>
  • To: address@concealed
  • Cc: Olivier Salaün <address@concealed>
  • Subject: Re: [sympa-users] Insecure dependency in open while running setuid
  • Date: Thu, 13 Dec 2007 09:24:24 -0600

Aha. There's the missing piece. Unsafe mode.

On Thu, 13 Dec 2007 10:27:07 +0100
Olivier Salaün <address@concealed> wrote:

> This error happens when wwsympa.fcgi is run with a setUID bit.
> You should check that the first line of wwsympa.fcgi includes the
> "-U" switch. Sympa's installation plrocedure is supposed to set this
> -U switch if needed.
>
> # head -1 /home/sympa/bin/wwsympa.fcgi
> #!/usr/bin/perl -U
>
> Mark K a écrit :
> > I am getting this error now when trying to access the web interface.
> > That line is :
> > ## Read access to prevent "Bad file number" error on Solaris
> > my $fh;
> > --> unless (open $fh, $open_mode.$lock_file) {
> > &do_log('err', 'Cannot open %s: %s', $lock_file, $!);
> > return undef;
> > }
> >
> > I am running mod_fcgid and have wwsympa-wrapper.fcgi setuid. Any
> > hints?
>


--
Mark K




Archive powered by MHonArc 2.6.19+.

Top of Page