Hi Folks,

My nightly sa-upgrade caught this funny error and I cannot figure out...

Mar 25 04:15:45.030 [76697] info: body_0: 1547 base strings extracted in 37 
seconds
rules: failed to run FUZZY_OCR test, skipping:
        (Timeout::_run: Insecure dependency in open while running with -T 
switch at 
/usr/local/lib/perl5/site_perl/5.8.9/Mail/SpamAssassin/Plugin/FuzzyOcr.pm line 
425.
)
sa-compile: not compiling; 'spamassassin --lint' check failed!

sub logfile {
    my $logtext = $_[0];
    my ( $sec, $min, $hour, $mday, $mon, $year, $wday, $yday, $isdst ) = 
localtime(time);
    my $time = sprintf(
        "%4d-%02d-%02d %02d:%02d:%02d",
        $year + 1900,
        $mon + 1, $mday, $hour, $min, $sec
    );
    $logtext =~ s/\n/\n                      /g;
***    unless ( open LOGFILE, ">> $logfile" ) {
        warn "Can't open $logfile for writing, check permissions";
    }
    flock( LOGFILE, LOCK_EX );
    seek( LOGFILE, 0, 2 );
    print LOGFILE "[$time] $logtext\n";
    flock( LOGFILE, LOCK_UN );
    close LOGFILE;
}

The error line is at the *** above.

I'm far from being a Perl expert, what is a "Insecure dependency in open" (I'm 
guessing that -T is the perl switch to enable "taint" checks???)

And I checked (copied the warn line to above the open), the file 
"/var/log/FuzzyOcr.log" is owned and writable by the user (mailnull in my case 
as I'm running on freebsd).

TIA,

-lee


Reply via email to