after a perl update, postgrey no longer starts, and crashes immediately. syslog only shows that the process starts in background running from command line exits immediately. strace postgrey gives a line write(2, "Insecure dependency in socket wh"..., 121Insecure dependency in socket while running with -T switch at /usr/lib64/perl5/5.18.2/x86_64-linux/IO/Socket.pm line 81. Reproducible: Always Steps to Reproduce: 1. update perl to 5.18 2. /etc/init.d/postgrey restart 3. rc-status | grep crash Actual Results: shows postgrey crashed Expected Results: shows postgrey started https://github.com/schweikert/postgrey/pull/4/files adjust /usr/sbin/postgrey from line 557 if($opt{dbdir}) { $opt{dbdir} =~ /^(.*)$/; $opt{dbdir} = $1; } + # untaint what is given on --pidfile. It is not security sensitive since + # it is provided by the admin + if($opt{pidfile}) { + $opt{pidfile} =~ /^(.*)$/; $opt{pidfile} = $1; + } + # untaint what is given on --inet. It is not security sensitive since + # it is provided by the admin + if($opt{inet}) { + $opt{inet} =~ /^(.*)$/; $opt{inet} = $1; + } # determine proper "logsock" for Sys::Syslog my $syslog_logsock;
*** This bug has been marked as a duplicate of bug 518684 ***
