[exim] Tainted filenames?

2024-08-22 Thread Marco Gaiarin via Exim-users
I'm 'de-tainting' my old exim config file, but i've found a trouble. I've a transport that have: dkim_private_key = ${if exists{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{0}} that lead to: 2024-08-22 12:19:34

[exim] Re: Tainted filenames?

2024-08-22 Thread Slavko via Exim-users
Dňa 22. augusta 2024 14:47:22 UTC používateľ Marco Gaiarin via Exim-users napísal: >clearly 'DKIM_DOMAIN' and 'DKIM_SELECTOR' are macros. > >How can i detaint it? Thanks. Depend what is defined in these macros, show them. regards -- Slavko https://www.slavino.sk/ -- ## subscription config

[exim] Re: Tainted filenames?

2024-08-22 Thread Marco Gaiarin via Exim-users
Mandi! Slavko via Exim-users In chel di` si favelave... >>clearly 'DKIM_DOMAIN' and 'DKIM_SELECTOR' are macros. >>How can i detaint it? Thanks. > Depend what is defined in these macros, show them. Right, sorry. DKIM_SELECTOR = 1234 DKIM_DOMAIN = ${lc:${domain:$h_from:}} Thanks. -- --

[exim] Re: Tainted filenames?

2024-08-22 Thread Tapio Peltonen via Exim-users
The domain is the problem there. You need to detaint it using a lookup of valid domains. How you do this depends on your setup. On Fri, 23 Aug 2024 at 02:12, Marco Gaiarin via Exim-users wrote: > > Mandi! Slavko via Exim-users > In chel di` si favelave... > > >>clearly 'DKIM_DOMAIN' and 'DKIM_S