“Insecure dependency in eval while running with -T switch on perl and ubuntu 16.04.”

huangapple go评论57阅读模式
英文:

Insecure dependency in eval while running with -T switch on perl and ubuntu 16.04

问题

我在加载 Ubuntu 16.04 上的 foswiki Apache 网站时遇到了以下文本行的小问题。

错误:

Foswiki 检测到内部错误 - 请检查您的 Foswiki 日志和 Web 服务器日志以获取更多信息。

在运行时以 -T 开关运行时,eval 中存在不安全的依赖项

错误日志:

/var/www/Foswiki-1.1.9/lib/Foswiki.pm 第 3153 行运行 eval 时存在不安全的依赖项。

背景:

  • 最初的虚拟机在 Ubuntu 12.04 上,并运行 foswiki 1.1.9。
  • 然后我升级了 Ubuntu 到 14.04,并成功使 Apache Web 服务在 foswiki 上工作。
  • 然后我将其升级到 Ubuntu 16.04,并出现了上述错误。
  • 在 Ubuntu 12.04 上:Perl 版本是 5.14。
  • 在 Ubuntu 16.04 上:Perl 版本是 5.22。

注意:我在编程语言方面的知识非常有限,我需要将此虚拟机升级到 Ubuntu 20.04 LTS 或 22.04(无论哪个版本都可以)。

英文:

I have a small issue with the following line of text when loading the apache website of foswiki on Ubuntu 16.04.

Error:

>Foswiki detected an internal error - please check your Foswiki logs and webserver logs for more information.

Insecure dependency in eval while running with -T switch

Log from error.log:

>Insecure dependency in eval while running with -T switch at /var/www/Foswiki-1.1.9/lib/Foswiki.pm line 3153.

**Background: **

  • Originally the VM was on ubuntu 12.04 and running foswiki 1.1.9.
  • then I ran the upgrade on ubuntu and made it to 14.04 and was able to make the apache webservice work for foswiki.
  • then I upgraded it to ubuntu 16.04 and seeing the error above.
  • on ubuntu 12.04: perl version was 5.14
  • on ubuntu 16.04: perl version is 5.22

Note: I have very limited knowledge in programming language and I need to upgrade this VM all the way up to ubuntu 20.04 LTS or 22.04 what ever I can.

答案1

得分: 1

The program was run using perl -T or as a setuid/setgid script, which enables taint mode. Taint mode prevents user inputs from being used in certain operations for security purposes. This is particularly appropriate for a web script.

Changes to the program or module will be needed to resolve the issue. Please consult their authors.

英文:

The program was run using perl -T or as a setuid/setgid script, which enables taint mode. Taint mode prevents user inputs from being used in certain operations for security purposes. This is particularly appropriate for a web script.

Changes to the program or module will be needed to resolve the issue. Please consult their authors.

答案2

得分: -1

发现了解决这个问题的方法:

  1. 将此位置下的所有脚本:\var\www\Foswiki-1.1.9\
  2. 从脚本中移除了 -wT 选项,然后开始正常工作。
英文:

Found the workaround to this problem:

  1. all the scripts in this location: \var\www\Foswiki-1.1.9\
  2. removed the -wT from the scripts and started working fine.

huangapple
  • 本文由 发表于 2023年5月15日 09:08:01
  • 转载请务必保留本文链接:https://go.coder-hub.com/76250314.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定