RT 3.0.3 cannot send mail when PerlTaint is on

RT Users
1

Hello,

I’m getting this message in my /var/log/messages on RedHat 9 when I
have PerlTaint turned on in my httpd.conf file:

Jul 7 15:53:18 it-linux1 RT: rt-3.0.3-2-4.3.56364903072595@somecompany.com
Could not send mail. -Insecure $ENV{PATH} while running with -T switch at
/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm line 263.
Stack:
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm:263]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm:175]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/ScripAction_Overlay.pm:192]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Scrip_Overlay.pm:409]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Scrip_Overlay.pm:344]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Transaction_Overlay.pm:169]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Ticket_Overlay.pm:3743]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Ticket_Overlay.pm:597]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Interface/Web.pm:286]
[/export/home2/apache/intranet_html/rt-3…

Turning off PerlTaint let’s email be sent just fine.

My RT_SiteConfig.pm is

Set($rtname , “somecompany.com”);
Set($Organization , “somecompany.com”);
Set($Timezone , ‘US/Pacific’);
Set($OwnerEmail , ‘it_manager@somecompany.com’);
Set($StoreLoops , 1);
Set($ParseNewMessageForTicketCcs , 1);
Set($RTAddressRegexp , ‘^help@somecompany.com$’);
Set($CorrespondAddress , ‘help@somecompany.com’);
Set($CommentAddress , ‘it_manager@somecompany.com’);
Set($SendmailArguments,“-oi -t -ODeliveryMode=b -OErrorMode=m”);
Set($WebBaseURL , “http://help.somecompany.com”);
Set($DateDayBeforeMonth , 0);

1;

Best,
Blair

Blair Zajac blair@orcaware.com
Plots of your system’s performance - Orca Home Page - OrcaWare Technologies

2

Hello,

I’m getting this message in my /var/log/messages on RedHat 9 when I
have PerlTaint turned on in my httpd.conf file:

FastCGI or ModPerl?

3

Jesse Vincent wrote:

Hello,

I’m getting this message in my /var/log/messages on RedHat 9 when I
have PerlTaint turned on in my httpd.conf file:

FastCGI or ModPerl?

Hi Jesse,

mod_perl 1.28 with httpd 1.3.27.

Best,
Blair

Blair Zajac blair@orcaware.com
Plots of your system’s performance - Orca Home Page - OrcaWare Technologies

4

About a year, another rt-user sent the list this message:

" I’m getting this message in my /var/log/messages on RedHat 9 when I
have PerlTaint turned on in my httpd.conf file:

Jul 7 15:53:18 it-linux1 RT: <rt-3.0.3-2-4.3.56364903072595 at somecompany.com>
Could not send mail. -Insecure $ENV{PATH} while running with -T switch at
/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm line
263.

Stack:
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm:263]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Action/SendEmail.pm:175]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/ScripAction_Overlay.pm:192]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Scrip_Overlay.pm:409]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Scrip_Overlay.pm:344]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Transaction_Overlay.pm:169]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Ticket_Overlay.pm:3743]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Ticket_Overlay.pm:597]
[/export/home2/apache/intranet_html/rt-3.0.3/lib/RT/Interface/Web.pm:286]
[/export/home2/apache/intranet_html/rt-3…

Turning off PerlTaint let’s email be sent just fine…"

There was not much follow-up to this, so I thought some might find it of use or
interest to note that we’ve encountered the same problem.

Syslog output was virtually identical to that given above; and the problem was
similarly resolved simply by removing the PerlTaint directive from httpd.conf
and fully stopping and re-starting apache.

Our apache environment and the most relevant parts of the RT config are

RedHat 9
Server version: Apache/1.3.31 (Unix)
mod_perl-1.29
RT 3.0.10

Set($MailCommand , ‘sendmailpipe’);
Set($SendmailArguments , “-oi -t”);

Mike Kukla,
Web Developer/Assistant System Administrator
University of Buffalo,
College of Arts and Sciences,
Educational Technology Node (CASet),
414 Clemens Hall