Arch Linux

ben123

Member

Registered: 2009-04-19

Posts: 13

Time zone issues in perl tainted mode

Ever since the following updates:

[2010-02-03 17:04] upgraded perl-date-manip (5.54-1 -> 6.05-1)
[2010-02-03 17:04] upgraded perl-error (0.17015-1 -> 0.17016-1)
[2010-02-03 17:04] upgraded perl-io-socket-ssl (1.30-1 -> 1.31-1)
[2010-02-03 17:04] upgraded perl-libwww (5.834-1 -> 5.834-2)
[2010-02-03 17:04] upgraded perl-mailtools (2.04-1 -> 2.06-1)
[2010-02-03 17:04] upgraded perl-timedate (1.16-3 -> 1.20-1)

I've had problems with one of the scripts in zoneminder that runs under tainted mode (perl -T).  This issue has already been captured in the following Debian bug:

http://groups.google.com/group/linux.de … 571946fcb8

Basically, a simple script below will produce the following error.

[ben@ruyi ~]$ cat ./test.pl
#!/usr/bin/perl -T
use Date::Manip;

[ben@ruyi ~]$ ./test.pl
Insecure $ENV{PATH} while running with -T switch at /usr/share/perl5/vendor_perl/Date/Manip/TZ.pm line 588, <DATA> line 335.
Compilation failed in require at ./test.pl line 2, <DATA> line 335.
BEGIN failed--compilation aborted at ./test.pl line 2, <DATA> line 335.

The reason the filer ran into this issue on Debian was he used SysV timezone naming which wasn't supported.  However, I'm running into this error not because of illegal naming (using America/Los_Angeles), but because /etc/timezone does not exist in Arch.  Instead we set in in rc.conf.

When I manually created /etc/timezone with "America/Los_Angeles" in it, the error went away, so some package must be hardwired to look at /etc/timezone.

So whatever's querying the timezone (presumably perl-date-manip), could we make it do it the right way under Arch?

Snowman

Developer/Forum Fellow

From: Montreal, Canada

Registered: 2004-08-20

Posts: 5,212

Re: Time zone issues in perl tainted mode

Probably. Open a bug report.

ben123

Member

Registered: 2009-04-19

Posts: 13

Re: Time zone issues in perl tainted mode

Thanks.  opened the following task.

http://bugs.archlinux.org/task/18467