Re: {bb} Manually setting a "clear" state

[Tom Schmidt <tschmidt@micron.com>]

maint.pl uses the perl -T option like other CGIs, so it expects the path 
to be untainted. Internally, it should only have $BBHOME/bin /usr/bin 
and /bin in its $PATH.

From the O'Reilly Perl book:

If you get the "Insecure $ENV{PATH}" message, you need to set $ENV{PATH} 
to a known value, and each directory in the path must be non-writable by 
anyone other than the directory's owner and group.

So my guess is that $BBHOME/bin permissions are group or world writable 
(not 755).

Tom

chris.ivey@verizon.com wrote:
> Thank you for the information, and maint.pl looks like an outstanding 
> tool.  When I installed it, I get this error when I open the page:
>
> Insecure directory in $ENV{PATH} while running with -T switch at 
> /var/www/cgi-bin/maint.pl line 316.
>
> Any thoughts on what that is about?
>
> Chris Ivey
>
> HP OpenView Certified Consultant - NNM 6.x on Unix  (0010-01-42093)
> SkillDrill.com Certified Cold Fusion 4.5 Developer
> MTS - Systems Engineer IV
> Verizon Data Services, ENSS-West NMS Tools Group
> Office: (813) 978-4844
> Pager: (813) 266-2420
> AIM: IveyAtGTEDS
>
> "Don't insult me.  Luck is for those without skill." :: Greg Sanders, CSI
>
> "Livin' lovin', lovin' livin', it's all good... I'm lovin' livin', it's 
> all good." :: Will Smith, "It's All Good", Big Willie Style
>
>
> *"PAUL WILLIAMSON" <pwilliamson@mandtbank.com>*
> Sent by: owner-bb@bb4.com
>
> 10/04/2005 03:00 PM
> Please respond to
> bb@bb4.com
>
>
> 	
> To
> 	bb@bb4.com
> cc
> 	
> Subject
> 	RE: {bb} Manually setting a "clear" state
>
>
> 	
>
>
>
>
>
> Good catch.  I haven't been able to get the latest BB
> version running properly on my FC4 server, but this
> is definitely good information!
>
> Paul
>
>  >>> kmckinnis@macrovision.com 10/04/05 2:28 PM >>>
> Actually, since I didn't see a version mentioned, we should add that
> in
> at least 1.9e and up, ENABLE_DISABLE is a runtime option, which makes
> it
> simpler to add. In $BBHOME/etc/bbdef-server.sh, just add
> ENABLE_DISABLE
> to RUNOPTS.
>
> I second maint.pl... good script.
>
> -----Original Message-----
> From: owner-bb@bb4.com [mailto:owner-bb@bb4.com] On Behalf Of PAUL
> WILLIAMSON
> Sent: Tuesday, October 04, 2005 10:37 AM
> To: bb@bb4.com
> Subject: Re: {bb} Manually setting a "clear" state
>
> Two items.  
>
> 1.  Make sure you have -DENABLE_DISABLE enabled at compile
> time.  It is not enabled by default.  It's fairly simple to recompile
> to get this feature enabled.
>
> 2.  Grab one of the maintenance scripts from deadcat.  I'm
> partial to maint.pl, but you can trigger this from the command
> line as well as a host of other tools a deadcat.
>
> Paul
>
>
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> To unsubscribe from this list, or to subscribe to the bb-digest list
> send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
> subscribe bb-digest in the BODY of the message.
>
>
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> To unsubscribe from this list, or to subscribe to the bb-digest list
> send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
> subscribe bb-digest in the BODY of the message.
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
> To unsubscribe from this list, or to subscribe to the bb-digest list
> send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
> subscribe bb-digest in the BODY of the message.

--
Tom L. Schmidt, Manager/SysAdmin Characterization Equipment
Micron Technology, Inc.  http://www.micron.com/
8000 S. Federal Way  P.O. Box 6  Mail Stop 01-371  Boise, Idaho USA 
83707-0006
mailto:tschmidt@micron.com  http://www.4schmidts.com/
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.