Intermittently, I am getting an “Insecure dependency in eval while
running setgid” error from Locale::Maketext::Guts. I haven’t been able
to pin down what actually triggers the error since it happens so
intermittently. Sometimes I can go for days without encountering it
and sometimes it occurs a few times in a day. My best guess is that it
occurs after updating a ticket. No significant errors turn up in the
debug log prior to getting the error from the web interface.
Restarting the web server clears the problem but it does eventually
return. I’ve played around with some FastCGI settings to try to get
the processes to kill themselves off but that has been unsuccessful
and would only be a bandage.
I’m running Fedora Core 1, RT version 3.0.9pre2, Apache 2.0.48,
FastCGI 2.4.2, Perl 5.8.1, IO::Stringy
2.109-BestPractical-Hack-20040107, Locale::Maketext 1.08.
I’m only including the formatted error, but if the raw error would be
useful, I can post that too. Any suggestions on how to procede would
be appreciated.
Michael
error: Insecure dependency in eval while running setgid at
/usr/lib/perl5/5.8.1/Locale/Maketext/Guts.pm line 247.
context:
…
243: unshift @code, “use strict; sub {\n”;
244: push @code, “}\n”;
245:
246: print @code if DEBUG;
247: my $sub = eval(join ‘’, @code);
248: die “$@ while evalling” . join(‘’, @code) if $@; # Should be impossible.
249: return $sub;
250: }
251:
…
code stack: /usr/lib/perl5/5.8.1/Locale/Maketext/Guts.pm:247
/usr/lib/perl5/5.8.1/Locale/Maketext.pm:196
/opt/rt3/lib/RT/CurrentUser.pm:360
/opt/rt3/lib/RT/Interface/Web.pm:215
/opt/rt3/local/html/Elements/MyTickets:24
/opt/rt3/share/html/index.html:31
/opt/rt3/share/html/autohandler:189
Michael S. Liebman m-liebman@northwestern.edu
http://msl521.freeshell.org/
“I have vision and the rest of the world wears bifocals.”
-Paul Newman in “Butch Cassidy & the Sundance Kid”
Michael S. Liebman wrote:
Intermittently, I am getting an “Insecure dependency in eval while
running setgid” error from Locale::Maketext::Guts. I haven’t been able
to pin down what actually triggers the error since it happens so
intermittently. Sometimes I can go for days without encountering it
and sometimes it occurs a few times in a day. My best guess is that it
occurs after updating a ticket. No significant errors turn up in the
debug log prior to getting the error from the web interface.
I’ve seen the same problem here on a configuration looking a lot like
yours. I converted my setup to using suexec and setting the mason
process to run as the rt-user and no setgid or setuid on the files
themselves.
A little hassle to get the suexec/mason setup to work, but haven’t seen
the problem since.
Roy-Magne Mo
I’ve seen the same problem here on a configuration looking a lot like
yours. I converted my setup to using suexec and setting the mason
process to run as the rt-user and no setgid or setuid on the files
themselves.
A little hassle to get the suexec/mason setup to work, but haven’t seen
the problem since.
Any information or advice on how to do it so I can avoid some of the
headaches you had? 
Michael
Michael S. Liebman m-liebman@northwestern.edu
http://msl521.freeshell.org/
“I have vision and the rest of the world wears bifocals.”
-Paul Newman in “Butch Cassidy & the Sundance Kid”
Michael S. Liebman wrote:
Any information or advice on how to do it so I can avoid some of the
headaches you had?
I guess I used most time on the permission parts of suexec, since suexec
is quite paranoid about these things.
I’m using this setup for fastcgi/suexec:
FastCgiIpcDir /tmp/fastcgi
FastCgiWrapper /usr/sbin/suexec
FastCgiServer /var/www/rt/mason_handler.fcgi -idle-timeout 300
-user rt -group rt
This must be set up outside of any virtualhost definitions.
The mason_handler itself must be placed inside the webroot of the
server, which is compiled into suexec. A hardlink should also work, but
things are on different partitions with me.
Apache is standard apache from Fedora Core 1.
Every perl packages is installed from cpan and I’m using rt 3.0.8.
Roy-Magne Mo
At 03:16 PM 2/11/2004 -0500, Michael S. Liebman wrote:
Intermittently, I am getting an “Insecure dependency in eval while
running setgid” error from Locale::Maketext::Guts. I haven’t been able
to pin down what actually triggers the error since it happens so
intermittently. Sometimes I can go for days without encountering it
and sometimes it occurs a few times in a day. My best guess is that it
occurs after updating a ticket. No significant errors turn up in the
debug log prior to getting the error from the web interface.
Michael,
We just had the same thing happen - our RT administrator fixed
the problem by “blowing away the mason cache”. We’re not sure
what went wrong to create the problem though.
Steve
At 03:16 PM 2/11/2004 -0500, Michael S. Liebman wrote:
Intermittently, I am getting an “Insecure dependency in eval while
running setgid” error from Locale::Maketext::Guts.
[snip happens]
We just had the same thing happen - our RT administrator fixed
the problem by “blowing away the mason cache”.
Hmm. Nothing in my mason cache, but then again the problem isn’t
manifesting itself right now.
Michael
Michael S. Liebman m-liebman@northwestern.edu
http://msl521.freeshell.org/
“I have vision and the rest of the world wears bifocals.”
-Paul Newman in “Butch Cassidy & the Sundance Kid”