Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 85365 - kaspersky messes up the sandbox of 'qmail-scanner-125'
Summary: kaspersky messes up the sandbox of 'qmail-scanner-125'
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Qmail Team (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-03-15 09:11 UTC by Erik Wasser
Modified: 2005-04-05 01:26 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
patch for the ebuild (configure-kav-sandbox.patch,792 bytes, patch)
2005-03-15 09:13 UTC, Erik Wasser
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Wasser 2005-03-15 09:11:29 UTC
During the installation the package tests a lot of scanners for the configuration of the big perl script 'qmail-scanner-queue.pl'. The kaspersky 5.0.4.0 opens during the (test-)scan some logfiles and that will break the sandbox:

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/tmp/sandbox-mail-filter_-_qmail-scanner-1.25-23779.log"

unlink:    /var/log/kav/kavscan.log
open_wr:   /var/log/kav/kavscan.log
open_wr:   /var/log/kav/kavscan.log
open_wr:   /var/log/kav/kavscan.log
open_wr:   /var/log/kav/kavscan.log

You found this test scan in the 'configure' file of the source. The script tries to start the 'kavscanner' (with a temporary directory for scanning) and parses the output.

Instead of starting the scanner I decide to grep the binary for the test string and evaluate the result in the same way the original source did.

Apply the attachement and everything is fine. B-)
Comment 1 Erik Wasser 2005-03-15 09:13:27 UTC
Created attachment 53545 [details, diff]
patch for the ebuild

Apply this patch *after* the other patch from the ebuild
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-04-04 21:59:33 UTC
no, don't do it that way.
use addpredict in the ebuild instead!
Comment 3 Erik Wasser 2005-04-05 01:07:37 UTC
Oh... I don't know about this command.

Then forget about the patch. This should be easy for the maintainer to do it for himself. B-)
Comment 4 Lim Swee Tat (RETIRED) gentoo-dev 2005-04-05 01:26:12 UTC
Added addpredict.