> > amavis claim Feb 1 14:37:25 rez14 amavis[29857]: (29857-04) > > (!)custom checks error: Insecure dependency in connect while > > running with -T switch at /usr/lib/perl/5.10/IO/Socket.pm line 114
> Do you have tips to debug the situation > I paste then entire code if you found the mistakes. Looks like you are reading some configuration settings from files (which yields a tainted value) and then use such value for a LDAP or SQL connect, which fail when given a tainted value as a parameter of a connect (e.g. host name or port number). You must test for validity whatever is read from a config file (and untaint it), before passing data on to system services. Mark ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user Please visit http://www.ijs.si/software/amavisd/ regularly For administrativa requests please send email to rainer at openantivirus dot org
