ports/50893: [PATCH] security/amavisd-new: fix compatibility with drweb

Mike Boev mike at tric.tomsk.gov.ru
Sun Apr 13 08:00:33 UTC 2003


>Number:         50893
>Category:       ports
>Synopsis:       [PATCH] security/amavisd-new: fix compatibility with drweb
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Apr 13 01:00:31 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Mike Boev
>Release:        FreeBSD 4.8-RC i386
>Organization:
Tomsk Regional Information Center
>Environment:
System: FreeBSD isrv.tric.tomsk.gov.ru 4.8-RC FreeBSD 4.8-RC #2: Mon Mar 31 11:20:55 NOVST 2003 root at isrv.tric.tomsk.gov.ru:/usr/obj/srv/FreeBSD/src/sys/ISRV i386

Installed drweb, amavisd-new ports.

>Description:
	The (default?) switches for launching drweb from within amavis are
somewhat lame, as we have drweb installed in /usr/local/drweb. The '-ni'
switch (which turns off looking into the ini file) obviously turns on 
compiled-in defaults for the drweb scanner, which in turn, starts looking for 
its engine and keyfile in /opt/drweb/ and fails.

	Without this switch on the command-line the scanner works as it should.
>How-To-Repeat:
	Install drweb and then install amavisd-new. Have amavis 
scan a message and see the log file.

	More easily, run:
	
	drweb -ni /etc/fstab
	
	... and see the error.
>Fix:
	The fix is to exclude the '-ni' switch from the command-line. 
Good things are that they are specified in the amavisd.conf file.

BTW, as far as I remember, other amavis-related ports also suffer from 
this problem; to fix them it would take one to patch amavisd itself, 
not the config file.

Please find this patch to cut it out:

--- amavisd.conf	Sun Feb  9 17:50:08 2003
+++ amavisd.conf	Sat Mar  1 22:50:37 2003
@@ -889,7 +889,7 @@
     qr/Info:\s+(.+)/ ],
 
   ['DrWeb Antivirus for Linux/FreeBSD/Solaris', 'drweb',
-    '-al -ar -fm -go -ha -ml -ni -ot -sd -up {}',
+    '-al -ar -fm -go -ha -ml -ot -sd -up {}',
     [0], [1], sub {('no-name')} ],
 
   ['FRISK F-Prot Antivirus/Linux', ['f-prot','f-prot.sh'],


>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list