Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 44449 - amavis should not be suid postfix
Summary: amavis should not be suid postfix
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-03-12 05:41 UTC by Daniel Ahlberg (RETIRED)
Modified: 2005-06-18 16:22 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Ahlberg (RETIRED) gentoo-dev 2004-03-12 05:41:59 UTC
When installing amavis with postfix the script /usr/sbin/amavis is suid postfix. This breaks virusscanning with clamav and maybe other virusscanners. After a lot of digging around I came up with why:

In postfix's master.cf you define that the user that should run the amavis script is 'amavis', however since the script is suid postfix and the script sets umask to 0077 all files created by the script is unreadable by external programs ran from within the script (as they regain uid amavis).
Comment 1 Cory Visi (RETIRED) gentoo-dev 2004-06-14 17:48:33 UTC
What is the full name of the amavis package you are using? There are two similarly named ones.

"amavis" is an antiquated package. You should consider using "amavisd-new", also in portage and actively maintained.

If you are talking about amavisd-new, then this is a more complex issue. The running users of various viruscanners, amavisd-new, postfix, and their corresponding work directories is dependent on the filtering system the user chooses to implement. There are a few contributions and other bug reports surrounding this issue.

I'll try to make an effort to consolidate these Bugs into something that can be discussed.
Comment 2 Cory Visi (RETIRED) gentoo-dev 2004-06-15 14:09:31 UTC
Please see discussion in Bug 48786.
Comment 3 Andrej Kacian (RETIRED) gentoo-dev 2005-06-18 16:22:22 UTC
Due to lack of maintainership, and to the fact that amavis has been a dead
project for quite some time, it has been removed from Portage. Sorry.