Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 76285 - No init.d dependencies to start MTA after Anti-Virus systems with resulting security race-condition
Summary: No init.d dependencies to start MTA after Anti-Virus systems with resulting s...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-12-31 22:01 UTC by Phil Pennock
Modified: 2005-06-18 16:21 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Phil Pennock 2004-12-31 22:01:30 UTC
There is no dependency ordering in the init.d scripts for "exim" and "clamd", as specific examples (presumed more generic) to ensure that an anti-virus package is started before the mail server.

As a result, there's a race-condition at system boot during which incoming mail might either slip through unfiltered, or be rejected, depending upon MTA configuration.

Reproducible: Always
Steps to Reproduce:
1. Race condition at start-up
2.
3.



Expected Results:  
Any anti-virus package should "provide antivirus" in depend() in the init.d script.

Any MTA which can use an AV package should "use antivirus" in depend() in the
init.d script.

Then any MTA would start after any anti-virus package, removing the race-condition.

I have done this locally and it now works as expected.
Comment 1 Andrej Kacian (RETIRED) gentoo-dev 2005-01-01 05:42:15 UTC
Thanks for suggestion, Phil, I'll go over out MTAs and mail AV scanners and add this feature.
Comment 2 Andrej Kacian (RETIRED) gentoo-dev 2005-06-18 16:21:18 UTC
Looks like I have forgotten about this one.

Initscripts for postfix, sendmail and exim are fixed, I'm not touching the rest,
as I don't know anything about them.

Thanks for reporting!