Mailing List Archive: [Bug 2602] Tainted name '/etc/exim/vfilters/domain.com' for file read not permitted

[Bug 2602] Tainted name '/etc/exim/vfilters/domain.com' for file read not permitted

Jun 18, 2020, 9:08 AM

Post #1 of 4 (147 views)

https://bugs.exim.org/show_bug.cgi?id=2602

Jeremy Harris <jgh146exb@wizmail.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |INVALID
Status|NEW |RESOLVED

--- Comment #1 from Jeremy Harris <jgh146exb@wizmail.org> ---
You are very likely using a tainted value, eg $domain, in building that
filename.
You need to change your config to use an untainted value. Please search for
de-tainting in the Concept Index of the documentation.

Closing as not a bug.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##

[Bug 2602] Tainted name '/etc/exim/vfilters/domain.com' for file read not permitted [ In reply to ]

exim-dev at exim

Jun 18, 2020, 10:44 AM

Post #2 of 4 (147 views)

Permalink

https://bugs.exim.org/show_bug.cgi?id=2602

--- Comment #2 from jhayhoe@liquidweb.com ---
A suggestion to update the documentation around filters as in that
documentation a example is provided stating that $domain can be used:

https://www.exim.org/exim-html-current/doc/html/spec_html/ch-systemwide_message_filtering.html

8. Per-address filtering
In contrast to the system filter, which is run just once per message for each
delivery attempt, it is also possible to set up a system-wide filtering
operation that runs once for each recipient address. In this case, variables
such as $local_part and $domain can be used, and indeed, the choice of filter
file could be made dependent on them.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##

[Bug 2602] Tainted name '/etc/exim/vfilters/domain.com' for file read not permitted [ In reply to ]

exim-dev at exim

Jun 18, 2020, 10:47 AM

Post #3 of 4 (147 views)

Permalink

https://bugs.exim.org/show_bug.cgi?id=2602

jhayhoe@liquidweb.com changed:

What |Removed |Added
----------------------------------------------------------------------------
Component|Filters |Documentation

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##

[Bug 2602] Tainted name '/etc/exim/vfilters/domain.com' for file read not permitted [ In reply to ]

exim-dev at exim

Jun 21, 2020, 7:32 AM

Post #4 of 4 (139 views)

Permalink

https://bugs.exim.org/show_bug.cgi?id=2602

--- Comment #3 from Jeremy Harris <jgh146exb@wizmail.org> ---
Docs update: 6e2400bf8b

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##