Bug 7646

Summary: spamd running with virtual-config-dir mkdir error
Product: Spamassassin Reporter: Giuseppe Ravasio <gravasio>
Component: spamc/spamdAssignee: SpamAssassin Developer Mailing List <dev>
Status: RESOLVED FIXED    
Severity: major CC: apache, wolfsplat
Priority: P2    
Version: 3.4.2   
Target Milestone: Undefined   
Hardware: PC   
OS: Linux   
Whiteboard:

Description Giuseppe Ravasio 2018-10-22 09:50:38 UTC 
Hi, 
I'm installin our new relay and as before I'm running spamd with --virtual-config-dir option enabled:
"spamd -d --pidfile=/var/run/spamd.pid -c -x --virtual-config-dir=/var/lib/spamassassin/vconfig/%u/ --allow-tell -u debian-spamd -g debian-spamd --max-children=5 --min-children=3 --max-spare=3"

It works well but it cannot create the vconfig dir if it's not existing.
I've put spamd in debug and the problem is with perl tainted:

config: mkdir /var/lib/spamassassin/vconfig/giuseppe/ failed: Insecure dependency in mkdir while running with -T switch at /usr/share/perl/5.26/File/Path.pm line 177, <GEN10> line 2.

I solved the problem running spamd without -T option (as arch linux is doing) but it could be great to fix this tainted variable.

Thanks
Giuseppe
Comment 1 Henrik Krohns 2022-04-16 07:06:27 UTC 
Sending        trunk/lib/Mail/SpamAssassin.pm
Transmitting file data .done
Committing transaction...
Committed revision 1899900.