Bug 2439 - 2.60-rc4 gives an Insecure Dependency error with -T
Summary: 2.60-rc4 gives an Insecure Dependency error with -T
Status: RESOLVED WONTFIX
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamc/spamd (show other bugs)
Version: SVN Trunk (Latest Devel Version)
Hardware: Other OpenBSD
: P5 normal
Target Milestone: 2.70
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-09-12 03:13 UTC by Pedro Timoteo
Modified: 2003-09-11 19:55 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Pedro Timoteo 2003-09-12 03:13:59 UTC 
Here's what I get when starting spamd:

Sep 12 11:00:48 kai spamd[29239]: razor2 check skipped: No such file or
directory Insecure dependency in open while running with -T switch at
/usr/local/libdata/perl5/site_perl/i386-openbsd/Razor2/Client/Config.pm line
414, <GEN2> line 1.

It starts fine, but obviously it isn't using razor.

Removing the -T from the #!/usr/bin/perl on the top of spamd makes it work.

I'm using OpenBSD 3.3, with Perl 5.8. spamd is running as root. I'm using the
latest razor2.
Comment 1 Malte S. Stretz 2003-09-12 03:54:48 UTC 
Yes, thats a bug in Razor2 which is not taint safe. The final 2.60 will ship a 
patch against Razor you'll have to apply to get rid of this stuff. Please see 
also this [1] posting by Daniel Quinal to SA-talk. Closing as WONTFIX but I 
actually meant CANTFIX ;-) 
 
[1]http://article.gmane.org/gmane.mail.spam.spamassassin.general/29666
Comment 2 Malte S. Stretz 2003-09-12 03:55:44 UTC 
P.S.: Sorry Dan for putting that typo in your name :)