On Tue, 25 Mar 2008 01:40:31 +0100
Robert Felber <[EMAIL PROTECTED]> wrote:

> the new version addresses the issue below. Policyd-weight does now exit if it
> detects symlinks on directories or sockets at startup or directory creation.

Hello Robert,

I'm afraid 0.1.14.15 doesn't fix the issue reported.

By symlinking /tmp/.policyd-weight to /root and starting policyd-weight, I was
still able to change ownership of /root directory to user policyd-weight is
configured to run as.

[EMAIL PROTECTED] /tmp # /usr/lib/postfix/policyd-weight --version
policyd-weight version: 0.1.14 beta-15, CacheVer: 5
Perl version:           5.008008
Net::DNS version:       0.61
OS:                     Linux 2.6.24-gentoo

Output from policyd-weight -d run attached.

Regards,
-- 
Andrej "Ticho" Kacian <ticho at gentoo dot org>
Gentoo Linux Developer - net-mail, antivirus, x86
[EMAIL PROTECTED] /tmp # /usr/lib/postfix/policyd-weight -d start 
policyd-weight version: 0.1.14 beta-15, CacheVer: 5
System: Linux thelair 2.6.24-gentoo #5 Wed Feb 20 20:18:37 CET 2008 i686 Intel(R) Celeron(R) CPU 2.60GHz GenuineIntel GNU/Linux
Perl version: 5.008008
Net::DNS version: 0.61
config: /etc/policyd-weight.conf

   $DEBUG        = 0;               
   $REJECTMSG    = "550 Mail appeared to be SPAM or forged. Ask your Mail/DNS-Administrator to correct HELO and DNS MX settings or to get removed from DNSBLs";
   $REJECTLEVEL  = 1;               
                                    
   $DEFER_STRING = 'IN_SPAMCOP= BOGUS_MX='; 
                                    
                                    
                                    
                                    
                                    
                                    
                                    
   $DEFER_ACTION = '450';           
                                    
                                    
                                    
   $DEFER_LEVEL  = 5;               
                                    
                                    
                                    
   $DNSERRMSG         = '450 No DNS entries for your MTA, HELO and Domain. Contact YOUR administrator';
   $dnsbl_checks_only = 0;          
                                    
                                    
   @dnsbl_checks_only_regexps = (
    
    
);                                  
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
   $LOG_BAD_RBL_ONLY  = 1;          
                                    
                                    
                                    
   @dnsbl_score = (
    'pbl.spamhaus.org',       3.25,          0,        'DYN_PBL_SPAMHAUS',
    'sbl-xbl.spamhaus.org',   4.35,       -1.5,        'SBL_XBL_SPAMHAUS',
    'bl.spamcop.net',         3.75,       -1.5,        'SPAMCOP',
    'dnsbl.njabl.org',        4.25,       -1.5,        'BL_NJABL',
    'list.dsbl.org',          4.35,          0,        'DSBL_ORG',
    'ix.dnsbl.manitu.net',    4.35,          0,        'IX_MANITU'
);
   $MAXDNSBLHITS  = 2;  
                        
                        
   $MAXDNSBLSCORE = 8;  
                        
                        
   $MAXDNSBLMSG   = '550 Your MTA is listed in too many DNSBLs';
   @rhsbl_score = (
    'multi.surbl.org',             4,        0,        'SURBL',
    'rhsbl.ahbl.org',              4,        0,        'AHBL',
    'dsn.rfc-ignorant.org',        3.5,      0,        'DSN_RFCI',
    'postmaster.rfc-ignorant.org', 0.1,      0,        'PM_RFCI',
    'abuse.rfc-ignorant.org',      0.1,      0,        'ABUSE_RFCI'
);
   $BL_ERROR_SKIP     = 2;  
                            
   $BL_SKIP_RELEASE   = 10; 
   $LOCKPATH          = '/tmp/.policyd-weight/';    
                                                    
   $SPATH             = $LOCKPATH.'/polw.sock';     
                                                    
   $MAXIDLECACHE      = 60; 
                            
                            
                            
   $MAINTENANCE_LEVEL = 5;  
                            
                            
   $CACHESIZE       = 2000; 
                            
   $CACHEMAXSIZE    = 4000; 
   $CACHEREJECTMSG  = '550 temporarily blocked because of previous errors';
   $NTTL            = 1;    
   $NTIME           = 30;   
                            
   $POSCACHESIZE    = 1000; 
                            
   $POSCACHEMAXSIZE = 2000; 
   $POSCACHEMSG     = 'using cached result';
   $PTTL            = 60;   
                            
   $PTIME           = '3h'; 
                            
                            
                            
   $TEMP_PTIME      = '1d'; 
                            
                            
                            
   $DNS_RETRIES     = 2;    
   $DNS_RETRY_IVAL  = 2;    
   $MAXDNSERR       = 3;    
                            
   $MAXDNSERRMSG    = 'passed - too many local DNS-errors';
   $PUDP            = 0;    
                            
                            
   $USE_NET_DNS     = 0;    
                            
                            
   $NS              = '';   
                            
                            
                            
   $IPC_TIMEOUT     = 2;    
   $TRY_BALANCE     = 0;    
                            
                            
                            
   @client_ip_eq_helo_score          = (1.5,       -1.25 );
   @helo_score                       = (1.5,       -2    );
   @helo_from_mx_eq_ip_score         = (1.5,       -3.1  );
   @helo_numeric_score               = (2.5,        0    );
   @from_match_regex_verified_helo   = (1,         -2    );
   @from_match_regex_unverified_helo = (1.6,       -1.5  );
   @from_match_regex_failed_helo     = (2.5,        0    );
   @helo_seems_dialup                = (1.5,        0    );
   @failed_helo_seems_dialup         = (2,          0    );
   @helo_ip_in_client_subnet         = (0,         -1.2  );
   @helo_ip_in_cl16_subnet           = (0,         -0.41 );
   @client_seems_dialup_score        = (3.75,       0    );
   @from_multiparted                 = (1.09,       0    );
   @from_anon                        = (1.17,       0    );
   @bogus_mx_score                   = (2.1,        0    );
   @random_sender_score              = (0.25,       0    );
   @rhsbl_penalty_score              = (3.1,        0    );
   @enforce_dyndns_score             = (3,          0    );
   $VERBOSE = 0;
   $ADD_X_HEADER        = 1;    
                                
                                
   $DEFAULT_RESPONSE    = 'DUNNO default'; 
                                           
                                           
                                           
   $syslog_socktype = 'unix';   
   $syslog_facility = "mail";
   $syslog_options  = "pid";
   $syslog_priority = "info";
   $syslog_ident    = "postfix/policyd-weight";
   $USER            = "polw";      
   $GROUP           = "";          
                                   
                                   
   $MAX_PROC        = 50;          
   $MIN_PROC        = 3;           
   $TCP_PORT        = 12525;       
                                   
   $BIND_ADDRESS    = '127.0.0.1'; 
                                   
                                   
                                   
                                   
                                   
                                   
   $SOMAXCONN       = 1024;        
                                   
                                   
                                   
   $CHILDIDLE       = 240;         
                                   
   $PIDFILE         = "/var/run/policyd-weight.pid";

debug: using port 12526
debug: USER:  polw
debug: GROUP: polw
debug: issuing user:  root
debug: issuing group: root
Argument "" isn't numeric in scalar assignment at /usr/lib/postfix/policyd-weight line 2769.
23:48:49 warning: cache_query: $csock couln't be created: connect: No such file or directory, calling spawn_cache()
23:48:49 info: cache spawned
23:48:49 info: cache: PTIME: 10800, TEMP_PTIME: 86400
23:49:23 warning: Got SIGINT. Daemon terminated.

Attachment: signature.asc
Description: PGP signature

Reply via email to