http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5574
[EMAIL PROTECTED] changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|P5 |P1
------- Additional Comments From [EMAIL PROTECTED] 2007-07-27 09:59 -------
actually, I don't think Matt's bug is setuid-related... probably better to
take it elsewhere (another bug).
however I have been able to reproduce the bug from comment 12 with
perl 5.8.x. I'll check in a test case: t/root_spamd_u_dcc.t
here's what I get when I run it on linux x86 with perl 5.8.7:
: jm 48...; sudo ./root_spamd_u_dcc.t
1..9
# Running under perl version 5.008007 for linux
# Current time local: Fri Jul 27 17:56:13 2007
# Current time GMT: Fri Jul 27 16:56:13 2007
# Using Test.pm version 1.25
/usr/bin/perl -T -w ../spamassassin.raw -C log/test_rules_copy
--siteconfigpath log/localrules.tmp -p log/test_default.cf -t -D info -r <
data/spam/gtubedcc.eml
ok 1
/usr/bin/perl SATest.pl -Mredirect -Olog/d.root_spamd_u_dcc/spamd.err.2
-olog/d.root_spamd_u_dcc/spamd.out.2 -- /usr/bin/perl -T -w ../spamd/spamd.raw
-D -x -s stderr -C log/test_rules_copy --siteconfigpath log/localrules.tmp -p
36735 -A 127.0.0.1 -c -H -s log/d.root_spamd_u_dcc/spamd.err.2.timestamped &
ok 2
sudo -u nobody ../spamc/spamc -F data/spamc_blank.cf -d 127.0.0.1 -p
36735 < data/spam/gtubedcc.eml
timed out at ./root_spamd_u_dcc.t line 50.
if you look at 'log/d.root_spamd_u_dcc/spamd.err.2.timestamped' you see this:
Fri Jul 27 17:56:37 2007 [3985] dbg: info: entering helper-app run mode
Fri Jul 27 17:56:37 2007 [3985] dbg: dcc: opening pipe: /usr/local/bin/dccproc
-H -x 0 -a 255.255.255.255 < /tmp/.spamassassin39853rohNatmp
Fri Jul 27 17:56:37 2007 [3992] dbg: util: changing real uid from 0 to match
effective uid 65534
Fri Jul 27 17:56:37 2007 [3992] dbg: info: leaving helper-app run mode
Fri Jul 27 17:56:37 2007 [3992] warn: dcc: check failed: util: setuid 0 to 65534
failed! at ../blib/lib/Mail/SpamAssassin/Util.pm line 1343.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
