Tantalo, Christopher G wrote:
> Can anyone shed some light on what this error means?
> Insecure $ENV{PATH} while running setuid at
> /var/appl/sls/bin/driver.pl line 1104.
> Line 1104 is
> print `date`;
>
You shouldn't shell out to date anyways, especially in the above manner
with no error checking, etc. Perl has builtin functions for collecting
date information.
> If I comment this out, then the following error message appears:
> Insecure dependency in open while running setuid at
> /var/appl/sls/bin/driver.pl line 1249.
> Line 1249 is
> my $err_file = $ENV{"SLS_LOG_PATH"} . "/drivererror" . $rt_id ..
> ".err";
> actually 1249 ---> open(ERR_FILE,">>$err_file") ||die "cannot open
> $err_file for reading:$!";
>
> Not sure what insecure warnings mean in terms of setuid. Any answer
> would be much appreciated.
> Thanks
> Chris
Because you are running setuid the taint mechanism is on. See,
perldoc perlsec
For more info. Whenever you have an error/warning you don't understand
that was thrown by Perl you can find more info in:
perldoc perldiag
HTH,
http://danconia.org
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
<http://learn.perl.org/> <http://learn.perl.org/first-response>
