Bug#529358: mailscanner: MailScanner dies an ugly death when using perl 5.10.0-22

[Simon Walter]

Hello,

> # dpkg -l perl
> ii  perl                                   5.10.0-22
> # dpkg -l mailscanner
> ii  mailscanner                            4.74.16-1
> 
> Afterwards, debugging mailscanner showed it dying with the error
> message "Insecure dependency in chown while running with the -T
> switch in /usr/share/MailScanner//MailScanner/Message.pm on line
> 2407". It appears to be while calling the perl chown function to set
> the permissions on an exploded message in the "incoming" work
> directory.

I have noticed this bug[1] myself some days ago while trying to package
4.76.25-1. I have fixed this bug, but have not tested the bugfix yet.

Your solution[3] to this problem is not every generic. Users would have
to edit /etc/ini.d/mailscanner depending on the mailserver they are
using.

There is also a problem when using clamavd, it crash and complains
about missing permission for lstat on the unpacked mail, no matter
how I configure "Incoming Work User/Group/Permission".

I currently don't have the time to track down the problem, find a
solution and test the -T patch. If anyone else has some spare time,
feel free to help out.

I have uploaded the current state to mentors[2].

I have added mailscanner-ml to CC because there are probably other
debian-users out there...

--
Regards
Simon Walter

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=+529358
[2]
http://mentors.debian.net/cgi-bin/sponsor-pkglist?action=details;package=mailscanner
[3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=+529358#10