Error Insecure dependency in chdir while running

[bahadori]

Hello
when i scan user in command i get this error:

Insecure dependency in chdir while running with -T switch at /usr/share/perl5/File/Find.pm line 876.

help?

[Sarah]

It looks like you are running cxs on a non-cPanel server. Since we don't provide support for cxs on non-cPanel servers we can't really help with this.

The error indicates an issue with the perl modules on your server which you need to fix.

[starnetwork]

Hi,
same for me, using directadmin
any advice?

[gregor]

Hello Sarah,

Is there any chance the developer could take a look at this problem?
I was able to fix the issue in the Perl File::Find module myself by adding this:

Code: Select all

  if ($udir =~ /^([ &:#-\@\w.]+)$/) {
      $udir = $1; #data is now untainted
  } else {
           # data is bad,  log this:
      print STDERR "[TAINT] Bad Data received as \$tainted \n";
 }
 # this line is generating the -T error in file find: 
  unless (chdir ($Is_VMS && $udir !~ /[\/\[<]+/ ? "./$udir" : $udir)) {

                

However, now I'm getting this error in the cxs.pl file itself which I can NOT fix myself due to it being obfuscated.

Code: Select all

Insecure dependency in system while running with -T switch at /usr/sbin/cxs line 234.

If you could please ask the developer for any kind of hint for us who are not using cpanel. I would really appreciate it.

[gregor]

A bit more information: CXS still works perfectly fine on a CentOS 6 machine (no CPANEL) this issue only seems to happen on CentOS 5 machines.

[gregor]

ok, did a bit more research and found that this error only happens if you use -Q foldername as an option.
In any case, if anybody else runs into this issue, the only solution I found was to use perlbrew to install a new perl (I chose 5.24.0).
You get perlbrew from the epel repo.

Then whenever you call cxs change it to call newperlpath/bin/perl /etc/cxs/cxs.pl...
Its a pain, but better than no protection. You can also create some aliases for your on demand cxs use in .bashrc

[mbsmt]

Hi. I tested CXS with no -Q option too. But that error happened again.
The stranger point is that this is happening only on some accounts, not for all of them.

Update:
I've updated Perl to the latest version on my server, but the problem still exists. It could not solve the problem.