On Sun, May 16, 2004 at 08:56:19PM -0500, Bookworm wrote:
> Problem #1 - the compile, rather than just saying "You don't have SUID 
> Perl, do you want to continue, Y/N" (which, to me, would make sense), 
> simply dies - as if, of course, everyone wants to have suid.  (yes, I 
> know about the --skip-setuid-test option - hard as it is to find in the 
> documentation - but should it really be necessary?)

Way back it used to say that - but people kept complaining about setuid
issues - i.e. the ignored the warning. So I made it stop.

You are right - a "hit enter to continue" would be better

> Problem #2 - once you have run through the install, put in the wrapper, 
> removed taint, and so forth, you then proceed to run 
> test_installation.sh.  This is too stupid to check to see if the wrapper 
> exists, so it will ALWAYS die on you, unless you run it setuidgid 
> qscand.  (which isn't documented anywhere - and no, it's not that obvious)

Well it can't think of everything. As you have installed the C-based
wrapper, where is it? People install that with many names. So the script
defaults to qmail-scanner-queue.pl. However, if you set QMAILQUEUE
appropriately before calling it - it'll use that instead.

I'll change the script from

echo "setting QMAILQUEUE to $QMAILQUEUE for this test..."

to

echo "QMAILQUEUE was not set, defaulting to $QMAILQUEUE for this test..."

That should give you an indication of what you need to do to make it work in
your environment

> 
> Oddball Issue - the /var/spool/qmailscan directory is, on the whole, 
> created qscand.  - For some odd reason, the /var/spool/qmailscan/tmp 
> directory, however, is root.root - anyone seen a reason for that 
> behaviour that I have missed?

That's plain wrong. Your system shouldn't even be working if that's the case!

> Question - for the -g initialization option, I've seen qmaild, qmailq, 
> and qscand.  Which is right?  Is it the same for -z?  (conflicting 
> documentation and examples)

They are all right. As it's setuid qscand, it doesn't matter what you run it
as.

> system like this.  I can barely debug my own issues in trying to 
> configure packages.  I'm just trying to provide more information, as 
> well as general feedback.  I DEFINITELY appreciate the effort - Jason, 

Fine by me! Anything to reduce the amount of confusion

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to