On Sep 30, 2005, at 01:19 PM, Gary V wrote:

John wrote:



This is a known issue when running Net::Server 0.88 on Perl 5.8.0. As you found out, you either have to start amavisd-new as your amavis user,
or downgrade to Net::Server 0.87. Net::Server 0.88 does not play
well with Perl 5.8.0 (and it appears 5.8.1 also). Ideally, you would
be running a newer version of Perl, but of course upgrading may create
an entirely new can of worms.

To downgrade to Net::Server 0.87. There is a link to my copy on this
page:

http://marc.theaimsgroup.com/?l=amavis-user&m=111999829830183&w=2

It seems you can simply install it over the top of 0.88.
Read through the thread for more info.

Gary,



But amavisd-new 2.3.3 Requires (depends) on Net::Server 0.88, that was the whole reason to upgrade to 0.88. 0.87 did fine for Amavisd-new 2.3.1.



Upgrading perl, I don't like the idea, I think it will break a lot of
depencies. Finaly upgrading the distribution is ultimate solution. But
that's not for today...



John




Gary V


AFAIK the code for changing the uid/gid was less secure in version
0.87 than it is in 0.88. I have created a patch for 0.88 that you can
use to revert to the somewhat less secure method, while still using
all the other features of 0.88.

The patch is for Daemonize.pm and should only be used to work around
this exact problem. Install 0.88, make a backup copy of Daemonize.pm,
then patch it. Let us know if it works for you.

http://www200.pair.com/mecham/spam/p7.txt

See the full bug report at http://rt.cpan.org/NoAuth/Bug.html?id=13450

Gary V


Why would you propose such a patch when it would make more sense to run the app as the intended or desired user, running from root or the amavisd user always works?

Also, from what I can see, I see nothing that makes this method more or less secure, they both achieve the same results which is to set the uid/gid.

-- Dale


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to