[hobbit] Graphs and maint.pl

[Henrik Stoerner]

On Wed, Mar 09, 2005 at 07:21:19AM +0100, lars ebeling wrote:

> But my question is: Where do I find documentation about available
> graphs?

There isn't any, really. hobbitgraph.cfg has the definitions so you
can see which ones exist by looking there, but you're right - it would
be nice to have a brief description of each somewhere.

> I also read about "Unsecure path...." from Perl. We also had some
> mails about this SetEnv. I never got it to work. Don't know where to
> put SetEnv.

I guess around the same place in httpd.conf that you added the
hobbi-cgi definitions.

The note I wrote about SetEnv and maint.pl was purely done from the
perlsec man-page. Since the problem doesn't show up anywhere I can try
Hobbit, it's a bit difficult to dive into.
  
> However changing -wT to -wt in maint.pl works. But probably makes it
> more unsecure.

It does make it accept "tainted" data. But since the same script runs
with -wT in lots of places, it shouldn't be a problem.

Maybe I'll do my own maint.pl replacement someday.


Henrik