https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6206
Summary: spamd: setuid mkdir Insecure Dependency
Product: Spamassassin
Version: 3.3.0
Platform: Other
OS/Version: All
Status: NEW
Severity: critical
Priority: P5
Component: spamc/spamd
AssignedTo: [email protected]
ReportedBy: [email protected]
perl-5.8.8-27.el5 spamassassin-3.3.0-alpha2
perl-5.10.0-73.fc11 spamassassin-3.2.5
perl-5.10.0-82.fc12 spamassassin-3.3.0-alpha2
spamd -D -d -c -m5 -H
useradd testuser
su - testuser
cat /usr/share/doc/spamassassin-3.3.0/sample-spam.txt | spamc
FAILS TO CREATE ~/.spamassassin
spamd: connection from localhost [127.0.0.1] at port 57087
spamd: setuid to testuser succeeded
spamd: creating default_prefs: /home/testuser/.spamassassin/user_prefs
spamd[25688]: config: using "/home/testuser/.spamassassin" for user state dir
spamd[25688]: config: mkdir /home/testuser/.spamassassin failed: Insecure
dependency in mkdir while running setuid at /usr/lib/perl5/5.10.0/File/Path.pm
line 104, <GEN18> line 2.
spamd[25688]: config: cannot create /home/testuser/.spamassassin/user_prefs: 2
spamd: failed to create readable default_prefs:
/home/testuser/.spamassassin/user_prefs
--
Configure bugmail:
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
