Amavis Mailing List Archive

From: Sven Schuster (schuster.sven@gmx.de)
Date: Fri Dec 17 2004 - 08:42:18 EST

• Next message: Gary Verchick: "[AMaViS-user] 2.2.1-rc1 upgrade success"
• Previous message: Jan Dschworak: "Re: [AMaViS-user] spam_lovers_ldap setting"
• In reply to: Mark Martinec: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"
• Next in thread: Mark Martinec: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"

Hi Mark,

On Fri, Dec 17, 2004 at 02:25:37PM +0100, Mark Martinec told us:
> So it appears this is the answer,
> the test must attempt to rename to a different name
> to be relevant:
>
> --- amavisd~ Thu Dec 16 16:07:25 2004
> +++ amavisd Fri Dec 17 14:19:16 2004
> @@ -5430,3 +5430,3 @@
> "by EUID $>, EGID $)" );
> - } elsif (rename($config_file, $config_file)) {
> + } elsif (rename($config_file, $config_file.'.moved')) {
> push(@msg, "Directory of a config file \"$config_file\" is writable ".
>

shouldn't the rename be reverted if it doesn't fail??

Sven

>
>
> Mark
>
>

--
Linux zion 2.6.10-rc3-skas3-v7 #6 Mon Dec 13 14:32:53 CET 2004 i686 athlon i386 GNU/Linux
 14:39:42 up 10:42,  1 user,  load average: 0.21, 0.15, 0.05
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

• Next message: Gary Verchick: "[AMaViS-user] 2.2.1-rc1 upgrade success"
• Previous message: Jan Dschworak: "Re: [AMaViS-user] spam_lovers_ldap setting"
• In reply to: Mark Martinec: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"
• Next in thread: Mark Martinec: "Re: [AMaViS-user] 2.2.1-rc1 trial SECURITY PROBLEM"