From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5) Gecko/20031007 Firebird/0.7 Description of problem: /usr/sbin/ccm-core-cms-configure.pl outputs this: Insecure dependency in open while running with -T switch at /usr/sbin/ccm-core-cms-configure.pl line 146, <CONF> line 55. I am running it '/usr/sbin/ccm-core-cms-configure.pl /etc/ccm-core-cms.cfg-tomcat4' Version-Release number of selected component (if applicable): ccm-core-cms-5.0.3-1 How reproducible: Always Steps to Reproduce: 1.Type '/usr/sbin/ccm-core-cms-configure.pl /etc/ccm-core-cms.cfg-tomcat4' 2.Wait 3.The error will appear Actual Results: The error appeared Expected Results: /usr/sbin/ccm-core-cms-configure.pl should have sucsessfully run. I have not seen it do that yet. Additional info:
I've tracked this down to a bug in the version of perl distributed with RH 8.0/9. It seems that when using \S in a regex, the matching groups are not untainted. Although slightly less flexible, we could replace \S with something like (?:\w|-|_) which would match all common directory namnes. As a temporary workaround you can remove the '-T' from the first line of the script.
closing old tickets