Package: squirrelmail Version: 2:1.4.23~svn20120406-2+deb8u1 Severity: normal
Dear Maintainer, The /etc/cron.daily/squirrelmail cronjob is not cleaning up old attachment files because find(1) arguments do not match; -maxdepth should be 3 (not 2), and on our system -atime needs changed to -ctime or -mtime, as something reads the files (hence updates atime) daily. The atime issue may be local to us (I don't see what is accessing the files offhand, perhaps a security tool scanning files?), but surely others will have that as well by running security tools, backup scripts and the like, so changing the default should only help. Thanks, Jesse --- /etc/cron.daily/squirrelmail.old 2018-04-26 11:58:59.952258428 -0600 +++ /etc/cron.daily/squirrelmail 2018-04-26 11:39:16.920089218 -0600 @@ -6,12 +6,12 @@ cd /var/spool/squirrelmail/attach find \ - -maxdepth 2 \ + -maxdepth 3 \ -xdev \ -type f \ \! -name '*.*' \ \! -name '*_*' \ - -atime +2 \ + -ctime +2 \ -print0 \ | xargs \ -0 \ -- System Information: Debian Release: 9.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 2.6.32-openvz-042stab127.2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages squirrelmail depends on: ii apache2 [httpd] 2.4.25-3+deb9u4 ii libapache2-mod-php5 5.6.30+dfsg-0+deb8u1 ii perl 5.24.1-3+deb9u3 Versions of packages squirrelmail recommends: ii ispell 3.4.00-5 ii php5-common [php5-mhash] 5.6.30+dfsg-0+deb8u1 ii squirrelmail-locales 1.4.18-20090526-1 ii squirrelmail-viewashtml 3.8-3 Versions of packages squirrelmail suggests: pn imap-server <none> ii imapproxy 1.2.8~svn20161210-2+deb9u1 pn php-pear <none> pn php5-ldap <none> ii php5-recode 5.6.30+dfsg-0+deb8u1 ii squirrelmail-decode 1.2-1 -- Configuration Files: /etc/cron.daily/squirrelmail changed [not included] /etc/squirrelmail/apache.conf changed [not included] -- no debconf information