Skip Menu |
 

This queue is for tickets about the activitymail CPAN distribution.

Report information
The Basics
Id: 5733
Status: resolved
Priority: 0/
Queue: activitymail

People
Owner: dwheeler [...] cpan.org
Requestors: wkallander [...] quietwisdom.com
Cc:
AdminCc:

Bug Information
Severity: Normal
Broken in: 1.19
Fixed in: (no value)



Subject: -g option can cause "Insecure dependency in open while running setgid" at line 134
Download (untitled) / with headers
text/plain 932b
This only happens under certain circumstances. We managed to get this error when we did the following: --CVSROOT/commitinfo has the following line: DEFAULT $CVSROOT/CVSROOT/activitymail -Q -lg --CVSROOT/loginfo has the following line: DEFAULT $CVSROOT/CVSROOT/activitymail -Q -cdagf %{sVv} -t user@example.com 1. checkout a module as root, edit files, and cvs update to make sure the files merge 2. su <user> 3. cvs commit the edited files When that procedure is followed, the pre-commit check fails saying: prompt$ cvs commit cvs commit: Examining . Insecure dependency in open while running setgid at /usr/local/cvs-rep/root/CVSROOT/activitymail line 134. cvs commit: Pre-commit check failed cvs [commit aborted]: correct above errors first! Now I know it is 'evil' to switch users, but we must, since only the root user may edit the CVSROOT, and root cannot commit to cvs... Its a strange setup, but we have to live w/ it.
From: David Wheeler <david [...] kineticode.com>
Subject: Re: [cpan #5733] -g option can cause "Insecure dependency in open while running setgid" at line 134
Date: Sat, 20 Mar 2004 11:09:25 -0800
To: bug-activitymail [...] rt.cpan.org
RT-Send-Cc:
Download (untitled) / with headers
text/plain 576b
On Mar 19, 2004, at 11:48 AM, Guest via RT wrote: Show quoted text
> Insecure dependency in open while running setgid at > /usr/local/cvs-rep/root/CVSROOT/activitymail line 134. > cvs commit: Pre-commit check failed > cvs [commit aborted]: correct above errors first! > > Now I know it is 'evil' to switch users, but we must, since only the > root user may edit the CVSROOT, and root cannot commit to cvs... Its > a strange setup, but we have to live w/ it.
I don't know much about switching users and setgid mode. Can you run activitymail so it's not in setgid mode? Regards, David
No reply after two years, so I'm closing.


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.