On Wed, Jul 21, 2010 at 10:26:36PM +0100, Charles Briscoe-Smith wrote:

Hi Charles,

> However, I've built myself a copy of ssmtp 2.64-3 and have not been able
> to reproduce this problem.  I did as follows:
> 
> c...@aragorn:/tmp$ dpkg-source -x ssmtp_2.64-3.dsc
> c...@aragorn:/tmp$ cd ssmtp-2.64
> c...@aragorn:/tmp/ssmtp-2.64$ debian/rules clean; debian/rules build
> c...@aragorn:/tmp/ssmtp-2.64$ sudo chgrp root ssmtp; sudo chmod g+s ssmtp
> 
> then:
> 
> c...@aragorn:/tmp/ssmtp-2.64$ ls -l ssmtp
> -rwxrwsr-x 1 cpbs root 67932 2010-07-21 20:11 ssmtp
> c...@aragorn:/tmp/ssmtp-2.64$ echo mailhub=invalid > test.conf
> c...@aragorn:/tmp/ssmtp-2.64$ echo test | ./ssmtp -C ./test.conf root
> ssmtp: Cannot open invalid:25
> 

Looking better at the situation it looks like this might break because my
config file resides on an encfs fuse filesystem. If I move it to some other
place it seems to be working. Also the error is just:

sendmail: Cannot open mailhub:25

Rather than any explicit exiting.

> I was expecting to find a test somewhere in ssmtp.c which, if it
> determined that ssmtp had been run setgid ("getgid() != getegid()")
> and the -C option was being parsed, would die with an error message.
> That would, I think, produce a behaviour matching the description in
> this bug report.
> 

Well, no, that didn't ever happen. No explicit exit, just dies trying its
internal default, in my case.

> (I don't know whether Debian keeps sources of intermediate versions
> of package for any length of time these days; I found version 2.64-3
> at https://www.securehost.com/mirror/debian/pool/main/s/ssmtp/
> and verifying against the checksums found at the end of
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567906.)
> 

Debian keeps them at snapshop.debian.org. I think your proposed patch of 
dropping privileges if an alternate config file would be fine.
I'd recommend it to contribute it upstream, rather than in Debian, though, so 
we don't diverge.

Thanks,

Guido




-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to