Issues with Taint mode?

Greetings. I’m setting up a new RT 3.8.8 instance in a Solaris 10 zone
with apache2.2/modperl2.03/Perl5.8.8 (all packages from blastwave). All
deps are met and it builds fine. Web server user /group is
nobody/nobody, perl -c RT_SiteConfig.pm checks out fine. Apache fails
when starting when I add the PerlRequire /opt/rt3/bin/webmux.pl line in
the V-host entry with the following error:

[Thu Jan 13 17:44:25 2011] [error] Couldn’t load RT config file
RT_SiteConfig.pm:\n\nInsecure dependency in require while running with
-T switch at /opt/rt3/bin/…/lib/RT/Config.pm line 562.\nCompilation
failed in require at (eval 7) line 1.\n

[Thu Jan 13 17:44:25 2011] [error] Can’t load Perl file:
/opt/rt3/bin/webmux.pl for server rt01.chi1.prlss.net:0, exiting…

So it appears that something (setuid?) is trigging taint mode with perl,
which causes the app to fail. I should add that I’ve got RT3.6.6
working with the same build of perl in a different zone, though that RT
install also came from blastwave. Same apache/perl/modperl version and
config. Is there anything I can do in the config to suppress taint
mode, or is there something obvious I’m missing? Here’s the
httpd-vhost.conf entry

NameVirtualHost *:80

<VirtualHost *:80>

ServerName rt01.chi1.prlss.net

ServerAlias tt.prlss.net

ServerAdmin rsullivan@peerlessnetwork.com

DocumentRoot /opt/rt3/share/html/

ErrorLog “/var/opt/csw/apache2/log/RT-error_log”

CustomLog “/var/opt/csw/apache2/log/RT-access_log” common

PerlModule Apache::DBI

AddDefaultCharset UTF-8

PerlRequire /opt/rt3/bin/webmux.pl

<Directory /opt/rt3/share/html>

    Order allow,deny

    Allow from all

    SetHandler perl-script

    PerlResponseHandler RT::Mason

</Directory>

Thanks,

Rob

Resolved, thanks Alex for your post to the other webmux.pl thread.
Needed to comment out the perlswitches section of the mod_perl/apache
config.From: rt-users-bounces@lists.bestpractical.com
[mailto:rt-users-bounces@lists.bestpractical.com] On Behalf Of Sullivan,
Rob
Sent: Thursday, January 13, 2011 6:18 PM
To: rt-users@lists.bestpractical.com
Subject: [rt-users] issues with Taint mode?

Greetings. I’m setting up a new RT 3.8.8 instance in a Solaris 10 zone
with apache2.2/modperl2.03/Perl5.8.8 (all packages from blastwave). All
deps are met and it builds fine. Web server user /group is
nobody/nobody, perl -c RT_SiteConfig.pm checks out fine. Apache fails
when starting when I add the PerlRequire /opt/rt3/bin/webmux.pl line in
the V-host entry with the following error:

[Thu Jan 13 17:44:25 2011] [error] Couldn’t load RT config file
RT_SiteConfig.pm:\n\nInsecure dependency in require while running with
-T switch at /opt/rt3/bin/…/lib/RT/Config.pm line 562.\nCompilation
failed in require at (eval 7) line 1.\n

[Thu Jan 13 17:44:25 2011] [error] Can’t load Perl file:
/opt/rt3/bin/webmux.pl for server rt01.chi1.prlss.net:0, exiting…

So it appears that something (setuid?) is trigging taint mode with perl,
which causes the app to fail. I should add that I’ve got RT3.6.6
working with the same build of perl in a different zone, though that RT
install also came from blastwave. Same apache/perl/modperl version and
config. Is there anything I can do in the config to suppress taint
mode, or is there something obvious I’m missing? Here’s the
httpd-vhost.conf entry

NameVirtualHost *:80

<VirtualHost *:80>

ServerName rt01.chi1.prlss.net

ServerAlias tt.prlss.net

ServerAdmin rsullivan@peerlessnetwork.com

DocumentRoot /opt/rt3/share/html/

ErrorLog “/var/opt/csw/apache2/log/RT-error_log”

CustomLog “/var/opt/csw/apache2/log/RT-access_log” common

PerlModule Apache::DBI

AddDefaultCharset UTF-8

PerlRequire /opt/rt3/bin/webmux.pl

<Directory /opt/rt3/share/html>

    Order allow,deny

    Allow from all

    SetHandler perl-script

    PerlResponseHandler RT::Mason

</Directory>

Thanks,

Rob