Skip Menu |
 
rt.cpan.org will be shut down on March 1st, 2021.

This queue is for tickets about the SGML-Parser-OpenSP CPAN distribution.

Report information
The Basics
Id: 112508
Status: new
Priority: 0/
Queue: SGML-Parser-OpenSP

People
Owner: Nobody in particular
Requestors: SREZIC [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: 0.994
Fixed in: (no value)



Subject: Test failures possible (because of File::Temp->safe_level)
Download (untitled) / with headers
text/plain 1022b
My smoker machines just generated a couple of fail reports running the SGML-Parser-OpenSP test suite. The test fails look like this: ... not ok 4 - parse_string with temp file name # Failed test 'parse_string with temp file name' # at t/20passfd.t line 31. # died: Error in tempfile() using template /var/tmp/cpansmoker-1023/2016022715/XXXXXXXXXX: Parent directory (/var/tmp/cpansmoker-1023/2016022715/) is not safe (Sticky bit not set on /var/tmp/cpansmoker-1023/2016022715/ when dir is group|world writable) at /tmpfs/.cpan-build-cpansand/2016022715/SGML-Parser-OpenSP-0.994-0Pkstj/blib/lib/SGML/Parser/OpenSP.pm line 65. ... The diagnostics is correct --- TMPDIR is set to a different directory than /tmp and this directory has rwxrwxr-x permissions. But in this case the group is a "safe" one, so IMHO there's not security problem here. I think it's better to remove the File::Temp->safe_level completely. This is a global setting which should go into a calling script, not into a module. Regards, Slaven


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.