On Thu, 2009-09-17 at 13:10 -0400, Warren Togami wrote:
> On 09/17/2009 11:26 AM, Karsten Bräckelmann wrote:
> > On Thu, 2009-09-17 at 10:51 -0400, Warren Togami wrote:

> >> This command fails to create the ~/.spamassassin directory, but it does
> >> successfully create .razor and .pyzor directories.
> >>
> >> cat /usr/share/doc/spamassassin-3.3.0/sample-spam.txt | spamassassin
> >> This command succeeds in creating ~/.spamassassin.
> >>
> >> spamassassin-3.2.5 behaved this way as well, so this is not a
> >> regression.  Should this be considered a bug?

Perl version (for both)?

> > Can definitely positively confirm this does work on Debian/Ubuntu and
> > Mandriva (custom RPM) with 3.2.
> >
> > Red Hat specific issue? Possibly SELinux related WRT spamd daemon?
> 
> Turning off selinux doesn't change anything.  I added -D to spamd
> invocation and it is showing more:
> 
> spamd: connection from localhost [127.0.0.1] at port 57087
> spamd: setuid to testuser succeeded
> spamd: creating default_prefs: /home/testuser/.spamassassin/user_prefs
> spamd[25688]: config: using "/home/testuser/.spamassassin" for user state dir
> spamd[25688]: config: mkdir /home/testuser/.spamassassin failed: Insecure 
> dependency in mkdir while running setuid at 
> /usr/lib/perl5/5.10.0/File/Path.pm line 104, <GEN18> line 2.

Ugh, tainted data?

> spamd[25688]: config: cannot create /home/testuser/.spamassassin/user_prefs: 2
> spamd: failed to create readable default_prefs: 
> /home/testuser/.spamassassin/user_prefs
> 
> This doesn't fail on other distros?

Frankly, I've never seen it fail. :/

Probably worth noting, that every system I checked or recall to have
been working is/was running Perl 5.8. Possibly an issue with Perl 5.10
implementing tainting slightly different?


-- 
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Reply via email to