Insecure dependency in open while running with -T switch at /usr/lib/perl/5.10/IO/File.pm and headerless quarantineing

[Jules Field]

On 21/11/2009 17:48, Gabor FUNK wrote:
> Hi all,
>
> I have two recent problems with MS (currently at 4.78.17-1 but was 
> trying different ones, last known good was 4.68.8-1, though for 
> problem 2) the change in /usr/lib/perl/5.10/IO/File.pm seems to be the 
> triggering cause in any MS version)
>
>
> 1) previously [v4.68.8-1] the
>   Quarantine Whole Messages As Queue Files = no
>   worked as intended, but now with 4.78.17-1 it saves
>   the body ONLY, without the headers.
What MTA are you using? What are your "Run As User" and "Run As Group" 
settings? I can't reproduce this. With MTA=sendmail it works fine for 
me. I get a file for each attachment, and 1 file called "message" which 
contains the entire message, both headers and body.
Worked fine with MTA=postfix as well.

>
>
>
> 2) messages with zip, doc and other attachments got into the 
> quarantine, mail.log said something like that:
> In Debugging mode, not forking...
> Trying to setlogsock(unix)
> Building a message batch to scan...
> Have a batch of 1 message.
> Insecure dependency in open while running with -T switch at 
> /usr/lib/perl/5.10/IO/File.pm line 63.
> "
I think I have fixed this.

I'll put out another beta in a minute to fix this problem.

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.