[Mimedefang] HEADS UP, bug in spamassassin versions 2.50 -> 2.63

[Patrik Andersin]

Hi,

There is an nasty umask bug in spamassasin version 2.50 - 2.63 which
effectively disables virus scanning in mimedefang if 

 a. you use sa's bayesian auto learn (which triggers the bug)
and
 b. you run your virusscanner with different uid than mimedefang.


The bug is in sa's UnixLocker.pm module in line 47:

  my $umask = 077;  ### <- BUG HERE!! shoud be: my $umask = umask 077;
  if (!open(LTMP, ">$lock_tmp")) {
      umask $umask;
      die "lock: $$ cannot create tmp lockfile $lock_tmp for $lock_file: $!\n";
  }
  umask $umask;


What happens is that after first auto learn, all new working files
created by mimedefang.pl are created with umask 077 and im my case
clamd cannot access those files any longer.

Bug report filed:
http://bugzilla.spamassassin.org/show_bug.cgi?id=3653

//patrik
-- 
cat at iki.fi