Mailing List Archive: yet a 93rd taint whine

yet a 93rd taint whine

Dec 9, 2023, 4:46 PM

Post #1 of 4 (104 views)

2023-12-10 00:44:14 1rC7vZ-0000Do-25 Tainted filename '/etc/exim4/dkim/psg.com.private'

for

DKIM_CANON = relaxed
DKIM_DOMAIN = ${sender_address_domain}
DKIM_PRIVATE_KEY = CONFDIR/dkim/${sender_address_domain}.private
DKIM_SELECTOR = rgnet-mail

is there a simple hack?

randy

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: yet a 93rd taint whine [ In reply to ]

exim-users at lists

Dec 9, 2023, 5:00 PM

Post #2 of 4 (104 views)

Permalink

On 12/10/23 00:46, Randy Bush via Exim-users wrote:
> 2023-12-10 00:44:14 1rC7vZ-0000Do-25 Tainted filename '/etc/exim4/dkim/psg.com.private'
>
> for
>
> DKIM_CANON = relaxed
> DKIM_DOMAIN = ${sender_address_domain}
> DKIM_PRIVATE_KEY = CONFDIR/dkim/${sender_address_domain}.private
> DKIM_SELECTOR = rgnet-mail
>
> is there a simple hack?

Use a dsearch lookup to ensure the file exists.

--
Cheers,
Jeremy

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: yet a 93rd taint whine [ In reply to ]

exim-users at lists

Dec 9, 2023, 6:58 PM

Post #3 of 4 (104 views)

Permalink

> 2023-12-10 00:44:14 1rC7vZ-0000Do-25 Tainted filename '/etc/exim4/dkim/psg.com.private'
>
> for
>
> DKIM_CANON = relaxed
> DKIM_DOMAIN = ${sender_address_domain}
> DKIM_PRIVATE_KEY = CONFDIR/dkim/${sender_address_domain}.private
> DKIM_SELECTOR = rgnet-mail
>
> is there a simple hack?

oh, and i have spent two hours following the design arguments of 2020,
down the duckduckgo rabbit hole, ... talk about complexity!

i am perfectly happy if a file does not exist for the sender domain to
simply not gen the dkim glorp.

randy

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: yet a 93rd taint whine [solved] [ In reply to ]

exim-users at lists

Dec 9, 2023, 10:05 PM

Post #4 of 4 (104 views)

Permalink

and, hours later

DKIM_CANON = relaxed
DKIM_DOMAIN = ${sender_address_domain}
DKIM_F = ${lookup {DKIM_DOMAIN.private} dsearch,ret=full {CONFDIR/dkim}}
DKIM_PRIVATE_KEY = ${if exists{DKIM_F}{DKIM_F}{0}}
DKIM_SELECTOR = rgnet-mail

works

yoiks

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/