Heiko Schlittermann <[email protected]> (So 30 Nov 2014 23:38:25 CET): > Hello Jeremy, > > in b1f8e4f8ec26ecb99e56a0ed3a5140b65ec95a97 you introduced a check > for the pclose() return value in the cmdline scanner. > > While this is a good idea generally, it may slightly break existing > deployments. At least one cmdline scanner (avast) uses it's exit code > to signal that a virus was found.
Using
av_scanner = cmdline:/bin/scan %s || true:<trigger>:<re>
may work. But since the complete command gets translated to
popen("/bin/scan %s || true 2>&1", "r")
the above line needs to be:
av_scanner = cmdline:{ /bin/scan %s || true; }:<trigger>:<re>
which is quite ugly. At least it should find it's way into the spec
that we're using popen() and /bin/sh and that such commands will work.
(I'm not sure about security implications from using popen() and
/bin/sh).
Greetings
--
Heiko
signature.asc
Description: Digital signature
-- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
