Re: [Speedycgi-users] Problem with SpeedyCGI

[Sam H. <sa...@da...>]

I suspect this is more an openwebmail issue than a speedycgi issue.
You might want to try posting to one of the openwebmail lists.

Maybe this error message relates to code in the config file that
require is pulling in, rather than the require statement itself.


 > I am attempting to run SpeedyCGI + Openwebmail on some mailservers.   I 
 > have installed the latest
 > version of both SpeedyCGI and Openwebmail.   Everything works 
 > wonderfully for about 5-10 minutes
 > and then these error messages start popping up in the log files.   
 > 
 > 
 > [Thu Oct 30 13:58:06 2003] [error] [client 204.29.75.195] Insecure 
 > dependency in require while running setuid at 
 > /var/www/cgi-bin/openwebmail/ow-shared.pl line 1196.
 > [Thu Oct 30 13:58:35 2003] [error] [client 204.29.75.195] Insecure 
 > dependency in require while running setuid at 
 > /var/www/cgi-bin/openwebmail/ow-shared.pl line 1196.
 > 
 > I checked the ow-shared.pl file  the error pops up as a Taint check 
 > error when trying to
 > include config files.    I hardwired a couple of them, but then the 
 > error would just jump to
 > a different line and a different require.   
 > 
 > $file="$config{'ow_cgidir'}/$file";
 >    ($file=~ /^(.*)$/) && ($file = $1);
 >    require $file; # done only once because of %INC
 > 
 >  From what I have read,  doing a regex and referring to the file as $1 
 > *should* make it pass the taint check.   So I am
 > confused and I was wondering if you guys had seen this before?    I am 
 > desparatly needing to get openwebmail running
 > a tad faster.
 > 
 > Thanks!
 > 
 > Rich
 > 
 > 
 > 
 > 
 > 
 > 
 > -------------------------------------------------------
 > This SF.net email is sponsored by: SF.net Giveback Program.
 > Does SourceForge.net help you be more productive?  Does it
 > help you create better code?   SHARE THE LOVE, and help us help
 > YOU!  Click Here: http://sourceforge.net/donate/
 > _______________________________________________
 > Speedycgi-users mailing list
 > Spe...@li...
 > https://lists.sourceforge.net/lists/listinfo/speedycgi-users
 >