When running the qmail script with the test flag:

ns1:/usr/src/qmail-scanner-0.95# ./qmail-scanner-queue.pl -g
Script is not setuid/setgid in suidperl
ns1:/usr/src/qmail-scanner-0.95#

Cool, I've seen a solution for this in the FAQ:

<snipped from FAQ>
Can't do suid some perl distributions
have decided that as running suid perl scripts is a rare event, they
won't
enable it by default. On these systems this package won't work.
Typically
the fix is:

chown root /usr/bin/suidperl
chmod 4711 /usr/bin/suidperl
<snipped>

But the permissions look correct:

chown root /usr/bin/suidperl-5.004
chmod 4711 /usr/bin/suidperl-5.004
ls -l /usr/bin/suidperl-5.004
-rws--x--x    2 root     root       499916 Mar  8  2000 suidperl-5.004

Now retrying gives:

ns1:/usr/src/qmail-scanner-0.95# ./qmail-scanner-queue.pl -g
Script is not setuid/setgid in suidperl
ns1:/usr/src/qmail-scanner-0.95#

Trying the test script gives:

ns1:/usr/src/qmail-scanner-0.95/contrib# ./test_installation.sh -doit
setting QMAILQUEUE to /var/qmail/bin/qmail-scanner-queue.pl for this
test...

Sending eicar test virus - should be caught by perlscanner module...
Script is not setuid/setgid in suidperl
qmail-inject: fatal: qq temporary problem (#4.3.0)
done!

Sending eicar test virus with altered filename - should only be caught
by commercial anti-virus modules (if you have any)...
Script is not setuid/setgid in suidperl
qmail-inject: fatal: qq temporary problem (#4.3.0)
Done!

I've also recompiled the latest stable perl 5.6.0 from source and it's
got setuid support in it, but still same errors.

Cheers

Chris



>>> "Olivier M." <[EMAIL PROTECTED]> 02/22/01 10:38a.m. >>>
On Thu, Feb 22, 2001 at 10:19:28AM +1300, Chris Hellberg wrote:
> I've tried getting qmail-scanner to work and don't seem to have much
> luck as the suidperl binary won't allow the perl qmail scanner script
to
> run under suid root. Anyone written a suitable wrapper that the
> qmail-scanner docos describe that I could pilfer?

what exactely is the problem ? qmail-scanner is running here
on different servers without any problem. Is suidperl a+rxs ?
What is the error message ? Have you checked the faq? 

Good luck 
Olivier

PS: there is also a qmail-scanner ML...
-- 
_________________________________________________________________
 Olivier Mueller - [EMAIL PROTECTED] - PGPkeyID: 0E84D2EA - Switzerland
qmail projects: http://omail.omnis.ch  -  http://webmail.omnis.ch 


Reply via email to