[Mimedefang] Interesting return code from TrendMicro

Stephen Smoogen smoogen at lanl.gov
Thu Apr 8 13:26:57 EDT 2004


I wrote a silly program to see what was happening.. and it doesnt seem
to be default perl (perse)


!/usr/bin/perl
#
# this is a silly test of vscan
#
open(SCANNER, "/etc/iscan/vscan -za -a /tmp/eicar*  2>&1|");
while (<SCANNER>) {
 $msg .= $_
}
close(SCANNER);
print $? . "\n";
print $msg . "\n";
[root at mailproxy root]# vi /usr/bin/mimedefang.pl 
[root at mailproxy root]# vi shoo.pl 
[root at mailproxy root]# cp shoo.pl /tmp/
[root at mailproxy root]# chmod 777 /tmp/shoo.pl 
[root at mailproxy root]# /tmp/shoo.pl 
768
[root at mailproxy root]# su -s /bin/bash defang
bash-2.05b$ /tmp/shoo.pl 
768

However mimedefang.pl prints out an $? of 2x that so I am wondering if a
module could alter things?

-- 
Stephen John Smoogen		smoogen at lanl.gov
Los Alamos National Lab  CCN-5 Sched 5/40  PH: 4-0645
Ta-03 SM-1498 MailStop B255 DP 10S  Los Alamos, NM 87545
-- You should consider any operational computer to be a security problem --



More information about the MIMEDefang mailing list