You are viewing a plain text version of this content. The canonical link for it is here.
Posted to modperl@perl.apache.org by jean jayet <je...@france.sun.com> on 2007/06/19 16:29:06 UTC

Insecure directory in $ENV{PATH}

Hello all,


during setup of mod_perl 2 with Apache 2 and perl 5.8.4 on a solaris 10

make test :

"Insecure directory in $ENV{PATH} while running with -T switch at
/tmp/mod_perl-2.0.3/Apache-Test/lib/Apache/TestConfig.pm"


does anybody have an idea what is the pb ?

rgds,
Jean




for info below is the output i catch :

# make test
cd "src/modules/perl" && make
/usr/bin/perl -Iblib/arch -Iblib/lib \
t/TEST -clean
APACHE_TEST_GROUP= APACHE_TEST_HTTPD= APACHE_TEST_PORT=
APACHE_TEST_USER= APACHE_TEST_APXS= \
/usr/bin/perl -Iblib/arch -Iblib/lib \
t/TEST -bugreport -verbose=0
[warning] root mode: changing the files ownership to 'nobody' (60001:60001)
[warning] testing whether 'nobody' is able to -rwx /tmp/mod_perl-2.0.3/t
"/usr/bin/perl" -Mlib=/tmp/mod_perl-2.0.3/Apache-Test/lib
-MApache::TestRun -e 'eval { Apache::TestRun::run_root_fs_test(60001,
60001, q[/tmp/mod_perl-2.0.3/t]) }';


[warning] result: OK
[warning] the client side drops 'root' permissions and becomes 'nobody'
/usr/apache2/bin/httpd  -d /tmp/mod_perl-2.0.3/t -f
/tmp/mod_perl-2.0.3/t/conf/httpd.conf -D APACHE2
using Apache/2.0.58 (prefork MPM)

waiting 120 seconds for server to start: .[Tue Jun 19 16:20:54 2007]
[info] 6 Apache2:: modules loaded
[Tue Jun 19 16:20:54 2007] [info] 0 APR:: modules loaded
[Tue Jun 19 16:20:54 2007] [info] base server + 29 vhosts ready to run tests
.[Tue Jun 19 16:20:55 2007] [error] Insecure directory in $ENV{PATH}
while running with -T switch at
/tmp/mod_perl-2.0.3/Apache-Test/lib/Apache/TestConfig.pm line
1106.\nCompilation failed in require at
/tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl line 18.\n\t...propagated
at /tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl line 19.\nBEGIN
failed--compilation aborted at
/tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl line 36.\nCompilation
failed in require at (eval 2) line 1.\n
[Tue Jun 19 16:20:55 2007] [error] Can't load Perl file:
/tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl for server localhost:8529,
exiting...

Re: Insecure directory in $ENV{PATH}

Posted by jean jayet <je...@france.sun.com>.
this is due to perl security (perlsec)

For "Insecure PATH" messages, it is required to set $ENV{'PATH}' to a
known value, and each directory in the path must be non-writable by the
world


rgds,
Jean

jean jayet wrote On 06/19/07 04:29 PM,:
> Hello all,
> 
> 
> during setup of mod_perl 2 with Apache 2 and perl 5.8.4 on a solaris 10
> 
> make test :
> 
> "Insecure directory in $ENV{PATH} while running with -T switch at
> /tmp/mod_perl-2.0.3/Apache-Test/lib/Apache/TestConfig.pm"
> 
> 
> does anybody have an idea what is the pb ?
> 
> rgds,
> Jean
> 
> 
> 
> 
> for info below is the output i catch :
> 
> # make test
> cd "src/modules/perl" && make
> /usr/bin/perl -Iblib/arch -Iblib/lib \
> t/TEST -clean
> APACHE_TEST_GROUP= APACHE_TEST_HTTPD= APACHE_TEST_PORT=
> APACHE_TEST_USER= APACHE_TEST_APXS= \
> /usr/bin/perl -Iblib/arch -Iblib/lib \
> t/TEST -bugreport -verbose=0
> [warning] root mode: changing the files ownership to 'nobody' (60001:60001)
> [warning] testing whether 'nobody' is able to -rwx /tmp/mod_perl-2.0.3/t
> "/usr/bin/perl" -Mlib=/tmp/mod_perl-2.0.3/Apache-Test/lib
> -MApache::TestRun -e 'eval { Apache::TestRun::run_root_fs_test(60001,
> 60001, q[/tmp/mod_perl-2.0.3/t]) }';
> 
> 
> [warning] result: OK
> [warning] the client side drops 'root' permissions and becomes 'nobody'
> /usr/apache2/bin/httpd  -d /tmp/mod_perl-2.0.3/t -f
> /tmp/mod_perl-2.0.3/t/conf/httpd.conf -D APACHE2
> using Apache/2.0.58 (prefork MPM)
> 
> waiting 120 seconds for server to start: .[Tue Jun 19 16:20:54 2007]
> [info] 6 Apache2:: modules loaded
> [Tue Jun 19 16:20:54 2007] [info] 0 APR:: modules loaded
> [Tue Jun 19 16:20:54 2007] [info] base server + 29 vhosts ready to run tests
> .[Tue Jun 19 16:20:55 2007] [error] Insecure directory in $ENV{PATH}
> while running with -T switch at
> /tmp/mod_perl-2.0.3/Apache-Test/lib/Apache/TestConfig.pm line
> 1106.\nCompilation failed in require at
> /tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl line 18.\n\t...propagated
> at /tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl line 19.\nBEGIN
> failed--compilation aborted at
> /tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl line 36.\nCompilation
> failed in require at (eval 2) line 1.\n
> [Tue Jun 19 16:20:55 2007] [error] Can't load Perl file:
> /tmp/mod_perl-2.0.3/t/conf/modperl_startup.pl for server localhost:8529,
> exiting...