Your message dated Sat, 12 Nov 2005 14:02:28 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Bug#309499: fixed in postgrey 1.22-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 17 May 2005 16:40:53 +0000
>From [EMAIL PROTECTED] Tue May 17 09:40:53 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mail.incase.de [217.72.114.200] 
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1DY57k-0001T0-00; Tue, 17 May 2005 09:40:53 -0700
Received: from localhost (localhost [127.0.0.1])
        by mail1_1.incase.de (Postfix) with ESMTP id 369ED251B52
        for <[EMAIL PROTECTED]>; Tue, 17 May 2005 18:40:19 +0200 (CEST)
Received: from mail.incase.de ([127.0.0.1])
        by localhost (mail1.incase.de [127.0.0.1]) (amavisd-new, port 10024)
        with ESMTP id 29896-08 for <[EMAIL PROTECTED]>;
        Tue, 17 May 2005 18:40:11 +0200 (CEST)
Received: from mail1.incase.de (mail.incase.de [217.72.114.200])
        by mail.incase.de (Postfix) with SMTP id D745E251B51
        for <[EMAIL PROTECTED]>; Tue, 17 May 2005 18:40:10 +0200 (CEST)
Received: by mail1.incase.de (sSMTP sendmail emulation); Tue, 17 May 2005 
18:40:10 +0200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Sven Mueller <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: postgrey won't start with -T switch on perl
X-Mailer: reportbug 3.8
Date: Tue, 17 May 2005 18:40:10 +0200
X-Debbugs-Cc: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at incase.de
X-Spam-Bayes: Score: 0.0000 Tokensummary: Tokens: new, 121; hammy, 121; 
        neutral, 84; spammy, 6.
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
        X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: postgrey
Version: 1.21-1
Severity: important

On my system, postgrey won't start when it has the -T switch to perl in
its shebang line. This is what I get when reproducing it manually:

================= cut here =============================

mail1:/data/shared/www# /usr/sbin/postgrey
--pidfile=/var/run/postgrey.pid --inet=127.0.0.1:60000 --dbdir
/data/shared/lib/postgrey --delay 60 --retry-window=4
--auto-whitelist-clients=3 --greylist-text=You are greylisted for %s
seconds. If you have trouble delivering mail to %r, please check the
information provided at http://mail.incase.de/greylisting.html
2005/05/17-18:30:17 postgrey (type Net::Server::Multiplex) starting!
pid(30786)
Binding to TCP port 60000 on host 127.0.0.1
Setting gid to "65534 65534"
Setting uid to "108"
Insecure dependency in open while running with -T switch at
/usr/sbin/postgrey line 485.

================= cut here =============================

The line in question is:

    open(LOCK, ">>$lock") or die "ERROR: can't open lock file: $lock\n";

$lock is set from the dbdir commandline switch, which is set to
/data/shared/lib/postgrey in my case (it is a HighAvailability setup).
Here is some relevant ls output (I stripped the timestamps):

================= cut here =============================

mail1:/data/shared/www# ls -ld /data/shared/lib/postgrey/*
/data/shared/lib/postgrey /data/shared/lib /data/shared /data /dev/log 
drwxr-xr-x  6 root     root        4096 /data
drwxr-xr-x 17 root     root        4096 /data/shared
drwxr-xr-x  3 root     root        4096 /data/shared/lib
drwx------  2 postgrey root        4096 /data/shared/lib/postgrey
-rw-------  1 postgrey nogroup    16384 /data/shared/lib/postgrey/__db.001
-rw-------  1 postgrey nogroup   270336 /data/shared/lib/postgrey/__db.002
-rw-------  1 postgrey nogroup    98304 /data/shared/lib/postgrey/__db.003
-rw-------  1 postgrey nogroup    16384 /data/shared/lib/postgrey/__db.004
-rw-------  1 postgrey nogroup 10485760 /data/shared/lib/postgrey/log.0000000001
-rw-------  1 postgrey nogroup     8192 /data/shared/lib/postgrey/postgrey.db
-rw-------  1 postgrey nogroup        0 /data/shared/lib/postgrey/postgrey.lock
-rw-------  1 postgrey nogroup     8192 
/data/shared/lib/postgrey/postgrey_clients.db
srw-rw-rw-  1 root     root           0 /dev/log

================= cut here =============================

I suppose this is some Perl problem, but I'm not sure what causes it or
how it could be fixed. If I don't use the -T switch for perl, postgrey
works as expected.

The problem is probably caused by not untainting the dbdir commandline
parameter. However, I'm no perl guru so I don't really know.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (990, 'testing'), (400, 'experimental'), (50, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.7-incase
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages postgrey depends on:
ii  debconf                       1.4.30.13  Debian configuration management sy
ii  libberkeleydb-perl            0.26-3     use Berkeley DB 4 databases from P
ii  libnet-dns-perl               0.48-1     Perform DNS queries from a Perl sc
ii  libnet-server-perl            0.87-3     An extensible, general perl server
ii  perl                          5.8.4-8    Larry Wall's Practical Extraction 
ii  ucf                           1.17       Update Configuration File: preserv

-- debconf information:
  postgrey/1.13-5_move-db:
  postgrey/1.14-1_lookup-by-subnet:
  postgrey/1.13-5_old-config:


---------------------------------------
Received: (at 309499-close) by bugs.debian.org; 12 Nov 2005 22:05:14 +0000
>From [EMAIL PROTECTED] Sat Nov 12 14:05:14 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 4.50)
        id 1Eb3S8-00024T-UO; Sat, 12 Nov 2005 14:02:28 -0800
From: Adrian von Bidder <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#309499: fixed in postgrey 1.22-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Sat, 12 Nov 2005 14:02:28 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Source: postgrey
Source-Version: 1.22-1

We believe that the bug you reported is fixed in the latest version of
postgrey, which is due to be installed in the Debian FTP archive:

postgrey_1.22-1.diff.gz
  to pool/main/p/postgrey/postgrey_1.22-1.diff.gz
postgrey_1.22-1.dsc
  to pool/main/p/postgrey/postgrey_1.22-1.dsc
postgrey_1.22-1_all.deb
  to pool/main/p/postgrey/postgrey_1.22-1_all.deb
postgrey_1.22.orig.tar.gz
  to pool/main/p/postgrey/postgrey_1.22.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adrian von Bidder <[EMAIL PROTECTED]> (supplier of updated postgrey package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 12 Nov 2005 15:38:42 +0100
Source: postgrey
Binary: postgrey
Architecture: source all
Version: 1.22-1
Distribution: unstable
Urgency: low
Maintainer: Adrian von Bidder <[EMAIL PROTECTED]>
Changed-By: Adrian von Bidder <[EMAIL PROTECTED]>
Description: 
 postgrey   - greylisting implementation for Postfix
Closes: 309499 338670
Changes: 
 postgrey (1.22-1) unstable; urgency=low
 .
   * New upstream version
     - fixes --dbdir (closes: #309499)
   * Swedish debconf translation, thanks to Daniel Nylander (closes: #338670)
Files: 
 675a30513052b2678e32a9ff38befcdd 679 mail optional postgrey_1.22-1.dsc
 ecd6e5a6e48b74a20639aa9fe7754b66 26446 mail optional postgrey_1.22.orig.tar.gz
 6ba01646b97c6dc7b1603214f838b1e4 15524 mail optional postgrey_1.22-1.diff.gz
 0e33f634047b7ef0115dfaa8fa620dcc 44278 mail optional postgrey_1.22-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: get my key from http://fortytwo.ch/gpg/92082481

iEYEARECAAYFAkN2XfwACgkQi6Qxi+Wn99Z8RQCgrY4oeuQayixtmgGKkj4Rtfsh
vCEAoLFaN6K8qnQV0mG0lC1qLu6odlu5
=wqml
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to