Skip Menu |

This queue is for tickets about the activitymail CPAN distribution.

Report information
The Basics
Id: 5733
Status: resolved
Priority: 0/
Queue: activitymail
People
Owner: dwheeler [...] cpan.org
Requestors: wkallander [...] quietwisdom.com
Cc:
AdminCc:
Bug Information
Severity: Normal
Broken in: 1.19
Fixed in: (no value)

History Show all quoted text
  Fri Mar 19 14:48:42 2004 Guest - Ticket created
Subject: -g option can cause "Insecure dependency in open while running setgid" at line 134
This only happens under certain circumstances. We managed to get this error when we did the following: --CVSROOT/commitinfo has the following line: DEFAULT $CVSROOT/CVSROOT/activitymail -Q -lg --CVSROOT/loginfo has the following line: DEFAULT $CVSROOT/CVSROOT/activitymail -Q -cdagf %{sVv} -t user@example.com 1. checkout a module as root, edit files, and cvs update to make sure the files merge 2. su <user> 3. cvs commit the edited files When that procedure is followed, the pre-commit check fails saying: prompt$ cvs commit cvs commit: Examining . Insecure dependency in open while running setgid at /usr/local/cvs-rep/root/CVSROOT/activitymail line 134. cvs commit: Pre-commit check failed cvs [commit aborted]: correct above errors first! Now I know it is 'evil' to switch users, but we must, since only the root user may edit the CVSROOT, and root cannot commit to cvs... Its a strange setup, but we have to live w/ it.
  Sat Mar 20 14:09:33 2004 david [...] kineticode.com - Correspondence added
From: David Wheeler <david [...] kineticode.com>
Subject: Re: [cpan #5733] -g option can cause "Insecure dependency in open while running setgid" at line 134
Date: Sat, 20 Mar 2004 11:09:25 -0800
To: bug-activitymail [...] rt.cpan.org
RT-Send-Cc:
On Mar 19, 2004, at 11:48 AM, Guest via RT wrote: Show quoted text
> Insecure dependency in open while running setgid at > /usr/local/cvs-rep/root/CVSROOT/activitymail line 134. > cvs commit: Pre-commit check failed > cvs [commit aborted]: correct above errors first! > > Now I know it is 'evil' to switch users, but we must, since only the > root user may edit the CVSROOT, and root cannot commit to cvs... Its > a strange setup, but we have to live w/ it.
I don't know much about switching users and setgid mode. Can you run activitymail so it's not in setgid mode? Regards, David
  Mon Apr 03 19:57:56 2006 dwheeler [...] cpan.org - Correspondence added
No reply after two years, so I'm closing.
  Mon Apr 03 19:57:57 2006 The RT System itself - Status changed from 'new' to 'open'
  Mon Apr 03 19:57:58 2006 dwheeler [...] cpan.org - Status changed from 'open' to 'resolved'
  Mon Apr 03 19:57:59 2006 dwheeler [...] cpan.org - Given to DWHEELER