[Mimedefang] [Fwd: [Bug 1984] New: CPAN Upgrade breaks a functioning Filter, permissions are lost]

[Albert E. Whale, CISSP]

  Please let me know if anyone has any additional information to add.

-------- Original Message --------
Subject: [Bug 1984] New: CPAN Upgrade breaks a functioning Filter, 
permissions are lost
Date: Tue, 27 May 2003 04:30:37 -0700 (PDT)
From: bugzilla-daemon at hughes-family.org
To: aewhale at abs-comptech.com



http://www.hughes-family.org/bugzilla/show_bug.cgi?id=1984

           Summary: CPAN Upgrade breaks a functioning Filter, permissions
                    are lost
           Product: Spamassassin
           Version: 2.55
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: critical
          Priority: P5
         Component: spamassassin
        AssignedTo: spamassassin-devel at lists.sourceforge.net
        ReportedBy: aewhale at ABS-CompTech.com


This past holiday weekend I was able to perform some basic upgrades on my Mail
Servers.  On Friday I found that SPAM Assassin 2.55 was available, and I was
running 2.53.  I pulled up the CPAN Tools and installed the latest tools, and
then spent the entire weekend attempting to correct the problems from a simple
upgrade.

After three days, the problem turned out to be one of permissions.  My default
permissions for the root user are 077 (an improvement from my assistance with
the Bastille project).  When I reset my permissions to 022 and reinstalled the
problems with using SPAMAssassin with MIMEDefang (a MILTER project) disappeared.
 I have received a request from the MIMEDefang developer that this should be
reported as a bug in the SPAMAssassin distribution as the software installation
routine should set the permissions for the software to insure the correct
permissions are set and that no security exposures are included as part of the
installation.

This situation apparently was repeated by several members of the MIMEDefang
mailing list this part weekend.  This is the reason that I have designated this
as a Critical issue.



------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.



-- 
Albert E. Whale, CISSP
http://www.abs-comptech.com
----------------------------------------------------------------------
ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
Sr. Security, Network, and Systems Consultant
Founding Board of Directors of Pittsburgh FBI - InfraGard