Mailing List Archive

Tainted filename
Hello everyone,

I have this in my paniclog with exim-4.94.

2020-08-01 16:10:04 1k1rH1-0005JN-R1 Tainted filename
'/etc/pki/tls/dk/lists.mydom.ain-dkim.priv.key'
2020-08-01 16:10:04 1k1rH1-0005JN-R1 unable to open file for reading:
/etc/pki/tls/dk/lists.mydom.ain-dkim.priv.key

The router causing this is:

remote_smtp_DK:
driver = smtp
dkim_domain = ${if
exists{/etc/pki/tls/dk/${lc:$sender_address_domain}-dkim.priv.key}{${lc:$sender_address_domain}}{}}
dkim_selector = key1
dkim_private_key = ${if
exists{/etc/pki/tls/dk/${lc:$sender_address_domain}-dkim.priv.key}\

{/etc/pki/tls/dk/${lc:$sender_address_domain}-dkim.priv.key}{0}}
dkim_canon = relaxed
dkim_strict = true
hosts_try_prdr = *

I have gone back to exim-4.93 for the time being so that mail can flow.


--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.", grep ^[^#] :-)
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: Tainted filename [ In reply to ]
On 01/08/2020 14:18, Odhiambo Washington via Exim-users wrote:
> dkim_domain = ${if
> exists{/etc/pki/tls/dk/${lc:$sender_address_domain}-dkim.priv.key}{${lc:$sender_address_domain}}{}}

As has been said multiple times recently on the mailing list,
replace your if-exists with a dsearch.
--
Cheers,
Jeremy

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/