Page 1 of 1
Error Insecure dependency in chdir while running
Posted: 09 Jul 2016, 05:55
by bahadori
Hello
when i scan user in command i get this error:
Insecure dependency in chdir while running with -T switch at /usr/share/perl5/File/Find.pm line 876.
help?
Re: Error Insecure dependency in chdir while running
Posted: 09 Jul 2016, 10:48
by Sarah
It looks like you are running cxs on a non-cPanel server. Since we don't provide support for cxs on non-cPanel servers we can't really help with this.
The error indicates an issue with the perl modules on your server which you need to fix.
Re: Error Insecure dependency in chdir while running
Posted: 01 Aug 2016, 13:39
by starnetwork
Hi,
same for me, using directadmin
any advice?
Re: Error Insecure dependency in chdir while running
Posted: 17 Aug 2016, 21:33
by gregor
Hello Sarah,
Is there any chance the developer could take a look at this problem?
I was able to fix the issue in the Perl File::Find module myself by adding this:
Code: Select all
if ($udir =~ /^([ &:#-\@\w.]+)$/) {
$udir = $1; #data is now untainted
} else {
# data is bad, log this:
print STDERR "[TAINT] Bad Data received as \$tainted \n";
}
# this line is generating the -T error in file find:
unless (chdir ($Is_VMS && $udir !~ /[\/\[<]+/ ? "./$udir" : $udir)) {
However, now I'm getting this error in the cxs.pl file itself which I can NOT fix myself due to it being obfuscated.
Code: Select all
Insecure dependency in system while running with -T switch at /usr/sbin/cxs line 234.
If you could please ask the developer for any kind of hint for us who are not using cpanel. I would really appreciate it.
Re: Error Insecure dependency in chdir while running
Posted: 17 Aug 2016, 21:39
by gregor
A bit more information: CXS still works perfectly fine on a CentOS 6 machine (no CPANEL) this issue only seems to happen on CentOS 5 machines.
Re: Error Insecure dependency in chdir while running
Posted: 18 Aug 2016, 17:41
by gregor
ok, did a bit more research and found that this error only happens if you use -Q foldername as an option.
In any case, if anybody else runs into this issue, the only solution I found was to use perlbrew to install a new perl (I chose 5.24.0).
You get perlbrew from the epel repo.
Then whenever you call cxs change it to call newperlpath/bin/perl /etc/cxs/cxs.pl...
Its a pain, but better than no protection. You can also create some aliases for your on demand cxs use in .bashrc
Re: Error Insecure dependency in chdir while running
Posted: 18 Nov 2016, 06:13
by mbsmt
Hi. I tested CXS with no -Q option too. But that error happened again.
The stranger point is that this is happening only on some accounts, not for all of them.
Update:
I've updated Perl to the latest version on my server, but the problem still exists. It could not solve the problem.