The mailing list for listmasters using Sympa

[Omen Wild <address@concealed>]

[ I emailed about this back in April.  The problem seemed to go away
for a while, but it is back now. ]

Back in April we migrated an instance of Sympa 6.0.1 running on Solaris
to 6.1.4 running on RHEL 6.  We are seeing a large number of `mod_fcgid:
stderr: Insecure dependency' errors in the Apache error log.  The
errors do not happen all the time, but seem to go in bursts.

For example, since midnight last night (16 hours ago) there have been
almost 900,000 errors logged.

  Count   File
 201196   /usr/share/sympa/lib/List.pm line 9709.
 604787   /usr/share/sympa/lib/Lock.pm line 253.

Line 9709 is "open(L, "> $file") || return undef;" in 
"sub _save_stats_file {".

Line 253 is "unless (open $fh, $open_mode.$lock_file) {" in 
"sub _lock_file {".

We are running sympa-6.1.4-1.20110407.RHEL6.src.rpm from
'http://sympa-ja.org/download/RHEL6.testing/SRPMS/?C=M;O=D'.  There are
some custom patches, but nothing in the Lock.pm module or around that
line of List.pm

I have attached the Apache config file if it helps.

Does anyone have any thoughts about how to fix this?

Thanks,
   Omen

-- 
Omen Wild
Security Administrator
(530) 752-1700
### Force SSL for all Sympa communications
<VirtualHost *:80>
        RewriteEngine on

        RewriteLog logs/rewrite.log

        RewriteCond %{HTTPS} !=on [nocase]
        RewriteRule ^/$ https://%{SERVER_NAME}/sympa/          
[redirect=permanent,last]
        RewriteRule . https://%{SERVER_NAME}%{REQUEST_URI}     
[redirect=permanent,last]
        RewriteRule ^/wws(.*)$ https://%{SERVER_NAME}/sympa/$1 
[redirect=permanent,last]
</VirtualHost>


### Apache Configuration for Sympa
IPCCommTimeout 120
MaxProcessCount 16

ScriptAlias /sympa /usr/libexec/sympa/wwsympa-wrapper.fcgi

<Location /sympa>
        SetHandler fcgid-script
        
        # Order deny,allow
        # Deny from all
        # Allow from all
</Location>


ScriptAlias /soap /usr/libexec/sympa/sympa_soap_server-wrapper.fcgi

<Location /soap>
        SetHandler fcgid-script

        Order deny,allow
        Deny from all
        Allow from 128.120.0.0/16 169.237.0.0/16
</Location>

Alias /static/sympa /var/lib/sympa/static_content

Attachment: smime.p7s
Description: S/MIME cryptographic signature