Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 48212 - qmail-scanner 1.20 permission issues
Summary: qmail-scanner 1.20 permission issues
Status: RESOLVED FIXED
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Core - Ebuild Support (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
: 45718 (view as bug list)
Depends on:
Blocks:
 
Reported: 2004-04-18 06:14 UTC by Jory A. Pratt
Modified: 2004-08-04 23:49 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
permissions on qmail-scanner files (qmail-scanner.txt,1.11 KB, text/plain)
2004-04-25 05:58 UTC, Jory A. Pratt
Details
ebuild fixed (qmail-scanner-1.20.ebuild,4.39 KB, text/plain)
2004-04-25 13:09 UTC, Jory A. Pratt
Details
qmail scanner proper documentation on post config. (qmail-scanner-1.20.ebuild,4.40 KB, patch)
2004-04-25 15:51 UTC, Jory A. Pratt
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Jory A. Pratt 2004-04-18 06:14:38 UTC
qmail-scanner 1.20 permissions are not correct after emerging, this is causing the crons job to not run at a scheduled time causing problems with the system. 

Reproducible: Always
Steps to Reproduce:
1.emerge qmail vpopmail qmail-scanner
2.configure qmail vpopmail
3./etc/init/svscan start
4. refer to qmail logs

Actual Results:  
qmail is unable to write to /var/spool/qmailscan, this is also a problem for the
crons job

Expected Results:  
I believe if we can get the permissions back to same permissions in 1.16-r2 of
qmail-scanner we will be fine I have tested this theory of using an older
version of qmail-scanner and seems to work fine. That is only possible solution
that I can see at this time.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-04-24 01:08:25 UTC
could you please include these errors that you are seeing, as I use and maintain qmail-scanner, qmail, vpopmail here for gentoo without any issues at all.
Comment 2 Jory A. Pratt 2004-04-24 08:44:09 UTC
yeah I will reinstall qmail-scanner from the ebuild and post out the permissions errors... basically you can't recieve any mail due to the fact that qmail-scanner.pl cant be run due to permissions denial.. There are extensive posts on this on the forums.
Comment 3 Jory A. Pratt 2004-04-24 08:51:24 UTC
@40000000408a8cb90c335c14 tcpserver: ok 17306 192.168.2.11:192.168.2.11:25 imf25aec.mail.bellsouth.net:205.152.59.73::62701
@40000000408a8cb91fdd574c X-Qmail-Scanner-1.20:[] cannot create /var/spool/qmailscan/tmp - Permission denied
@40000000408a8cb924be5d4c tcpserver: end 17306 status 0
@40000000408a8cb924be70d4 tcpserver: status: 0/40


Here is your basic error after installing qmail-scanner 1.20 Sure hope we can get this fixed soon.
Comment 4 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-04-24 10:40:09 UTC
please include the output of
"ls -la /var/qmail/bin/qmail-scanner* /var/spool/qmailscan/"
and
"grep qmail-scanner /etc/tcprules.d/tcp.qmail-smtp /etc/tcp.smtp"
Comment 5 Jory A. Pratt 2004-04-24 12:34:18 UTC
ls -la /var/qmail/bin/qmail-scanner* /var/spool/qmailscan/
-rwsr-xr-x  1 qscand qscand 88604 Apr 24 11:04 /var/qmail/bin/qmail-scanner-queue.pl
-rwxr-xr-x  1 qscand qscand 88592 Apr 24 11:01 /var/qmail/bin/qmail-scanner-queue.pl.old
 
/var/spool/qmailscan/:
total 60
drwxr-xr-x  6 qscand qscand  4096 Apr 24 11:05 .
drwxr-xr-x  6 root   root      68 Apr 24 11:01 ..
drwxr-xr-x  5 qscand qscand    36 Apr 24 11:01 archive
-rw-rw----  1 qscand qscand   868 Apr 24 11:34 mailstats.csv
-rw-------  1 qscand root   26437 Apr 24 11:34 qmail-queue.log
-rw-------  1 qscand root      37 Apr 24 11:05 qmail-scanner-queue-version.txt
drwxr-xr-x  5 qscand qscand    36 Apr 24 11:01 quarantine
-rw-r-----  1 qscand root   12288 Apr 24 11:05 quarantine-attachments.db
-rw-r--r--  1 qscand qscand  4279 Apr 24 11:01 quarantine-attachments.txt
-rw-rw----  1 qscand qscand     0 Apr 24 11:04 quarantine.log
drwx------  2 qscand root       6 Apr 24 11:34 tmp
lrwxrwxrwx  1 qscand qscand    31 Apr 24 11:04 viruses -> /var/spool/qmailscan/quarantine
lrwxrwxrwx  1 qscand qscand    35 Apr 24 11:04 viruses.log -> /var/spool/qmailscan/quarantine.log
drwxr-xr-x  5 qscand qscand    36 Apr 24 11:01 working

 grep qmail-scanner /etc/tcprules.d/tcp.qmail-smtp 127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
192.168.3.10:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
# If you are using qmail-scanner, this line here is the correct one to use
:allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
192.168.2.11:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"

/etc/tcp.smtp has never existed on my box.
Comment 6 Jory A. Pratt 2004-04-24 12:36:47 UTC
the -rwxr-xr-x  1 qscand qscand 88592 Apr 24 11:01 /var/qmail/bin/qmail-scanner-queue.pl.old would be the ebuild version of qmail-scanner the new version is qmail-scanner 1.22 hand installed which is only way I solution I have found that really works for my mailserver at the present time .. I will re emerge the actuall ebuild tonight and give you the permissions that it is setting. sorry for post 5.
Comment 7 Jory A. Pratt 2004-04-25 05:58:44 UTC
Created attachment 30011 [details]
permissions on qmail-scanner files

Here are the permision problems everyone seems to be having problems with at
the momement.
Comment 8 Jory A. Pratt 2004-04-25 06:07:54 UTC
I was gonna include that error in the attachment and forgot sorry .... 
@40000000408bb52b2c5da88c tcpserver: ok 20890 192.168.2.11:192.168.2.11:25 imf20aec.mail.bellsouth.net:205.152.59.68::34688
@40000000408bb52c04c7e65c X-Qmail-Scanner-1.20:[nightkiller108289769846120891] cannot open /var/spool/qmailscan/qmail-scanner-queue-version.txt - did you initialise the system by running "qmail-scanner-queue.pl -z"? - Permission denied
Comment 9 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-04-25 11:58:26 UTC
i see your problem right there, if you read the postinst message it tells you to switch AWAY from using qmail-scanner-queue.pl in your other scripts.

It's been compounded by somebody else changing part of the ebuild and not noting it in the ChangeLog.

for the moment, try switching to qmail-scanner-queue in your QMAILQUEUE variables, and if that still doesn't do it for you, then chmod 4755 on qmail-scanner-queue.pl.
Comment 10 Jory A. Pratt 2004-04-25 13:09:44 UTC
Created attachment 30036 [details]
ebuild fixed

This is the ebuild I just used to correct the permission problems if you follow
the post installation instructions you shouldn't have any problems. We owe
robbat2 a huge thanks for pointing out this discrepancy in the ebuild. Robin
Johnson thanks for all your support hope you can get this ebuild into portage
tree so others dont have this same problem. Your fix was right on for the
tcprules file on the queu variable.
Comment 11 Jory A. Pratt 2004-04-25 13:10:51 UTC
refer to http://bugs.gentoo.org/show_bug.cgi?id=48212#c10 for the proper fix on permission errors.
Comment 12 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2004-04-25 14:44:10 UTC
please don't close bugs until they are actually fixed in the cvs tree.
Comment 13 Jory A. Pratt 2004-04-25 15:51:19 UTC
Created attachment 30043 [details, diff]
qmail scanner proper documentation on post config.

this just fixes a typo in the ebuild I put up here earlier today. Robbat2 sorry
didnt mean to close it out early, atleast now I know to wait till they make it
to cvs server, sorry once again.
Comment 14 Rajiv Aaron Manglani (RETIRED) gentoo-dev 2004-05-06 13:44:55 UTC
*** Bug 45718 has been marked as a duplicate of this bug. ***
Comment 15 Rajiv Aaron Manglani (RETIRED) gentoo-dev 2004-08-04 12:10:47 UTC
please test qmail-scanner 1.22. does it have the same problems?
Comment 16 Lim Swee Tat (RETIRED) gentoo-dev 2004-08-04 23:49:19 UTC
Solved some time ago...

Closing