Bug #13450 for Net-Server: 0.88 crashes amavisd-new when using perl 5.8.0

[guest - Tue Jun 28 11:31:25 2005]: Show quoted text
Found the same with Red Hat Enterprise Linux 3 ES and perl-5.8.0. But the same amavisd-new 2.3.2 works pretty well with Fedora Core 4 running perl-5.8.6-15. It may be a perl-5.8.0 vs. Net::Server 0.88 compatibility problem.

Red Hat 9.0 Perl 5.8.0, Daemonize.pm [root@sf1 root]# grep amavis /etc/passwd amavis:x:999:999:amavisd-new daemon:/var/amavis:/sbin/nologin [root@sf1 root]# grep amavis /etc/group amavis:x:999:clamav ****************** print $(; print "\n"; POSIX::setgid($gid); print $(; print "\n"; results in: Jul 14 12:38:07 sf1.example.com amavisd[1825]: Net::Server: Setting gid to "999 999" 0 999 999 0 999 999 Jul 14 12:38:07 sf1.example.com amavisd[1825]: Net::Server: 2005/07/14- 12:38:07 Couldn't become gid "999": \n\n at line 486 in file /usr/lib/perl5/site_perl/5.8.0/Net/Server.pm ****************** I'm hoping I replaced the correct line here ... my $_gid = (split /\s+/, $()[0]; # if ($_gid != $gid) { # original line if (! grep {$gid == $_} split /\s+/, $() { die "Couldn't become gid \"$gid\": $!\n"; } now instead of gid, couldn't become uid: Jul 14 12:37:02 sf1.example.com amavisd[1824]: Net::Server: Setting gid to "999 999" Jul 14 12:37:02 sf1.example.com amavisd[1824]: Net::Server: Setting uid to "999" Jul 14 12:37:03 sf1.example.com amavisd[1824]: Net::Server: 2005/07/14- 12:37:02 Couldn't become uid "999": \n\n at line 486 in file /usr/lib/perl5/site_perl/5.8.0/Net/Server.pm ************************************* Just for comparison: On my Debian Sarge machine (Perl 5.8.6) (where there is no problem): sfm:~# grep amavis /etc/passwd amavis:x:103:104:AMaViS system user,,,:/var/lib/amavis:/bin/sh sfm:~# grep amavis /etc/group amavis:x:104:clamav ***************** print "$("; print "\n"; POSIX::setgid($gid); print "$("; print "\n"; results in: Jul 14 13:00:23 sfm amavisd-new[2250]: Net::Server: Setting gid to "104 104" 0 104 104 104 104 104 Jul 14 13:00:23 sfm amavisd-new[2250]: Net::Server: Setting uid to "103" ****************** A FreeBSD system running Perl 5.8.7 shows: 0 110 110 110 110 110

That may have wrapped, so here is a URL to the this patch if you would like: http://www200.pair.com/mecham/spam/p7.txt

[RHANDOM - Thu Jul 21 10:43:56 2005]: Show quoted text
Red Hat 9.0 Perl 5.8.0 # perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(500); print "($<)($>)\n"' (0)(0) (0)(0) POSIX::setuid($uid); + print "($<)($>)\n"; - if ($_gid != $gid) { + if (! grep {$gid == $_} split /\s+/, $() { Jul 21 09:01:31 sf1.example.com amavisd[3375]: Net::Server: Setting gid to "999 999" Jul 21 09:01:31 sf1.example.com amavisd[3375]: Net::Server: Setting uid to "999" (0)(0) Jul 21 09:01:31 sf1.example.com amavisd[3375]: Net::Server: 2005/07/21- 09:01:31 Couldn't become uid "999": \n\n at line 486 in file /usr/lib/perl5/site_perl/5.8.0/Net/Server.pm

Show quoted text
Red Hat 9.0 Perl 5.8.0: grep '999' /etc/passwd amavis:x:999:999:amavisd-new daemon:/var/amavis:/sbin/nologin perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(999); \ print "($<)($>)\n"' (0)(0) (0)(0) So on this 5.8.0 system, it does not matter whether the user exists or not, it always returns (0)(0). On my Debian Sarge Perl 5.8.6 machine, it does not matter whether the user exists or not either, it will return whatever you set POSIX::setuid() to: grep 999 /etc/passwd (nothing returned) perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(999); \ print "($<)($>)\n"' (0)(0) (999)(999) grep 103 /etc/passwd amavis:x:103:104:AMaViS system user,,,:/var/lib/amavis:/bin/sh perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(999); \ print "($<)($>)\n"' (0)(0) (103)(103) My FreeBSD systems acts identically to my Debian system. I am not a Perl programmer, so yes, specific is a good thing.

On the Red Hat machine: 1 (0-0) 2(999-999) ps: error: Unknown gnu long option. usage: ps -[Unix98 options] ps [BSD-style options] ps --[GNU-style long options] ps --help for a command summary (and with a user that does not exist:) 1 (0-0) 2(110-110) ps: error: Unknown gnu long option. usage: ps -[Unix98 options] ps [BSD-style options] ps --[GNU-style long options] ps --help for a command summary Sorry Paul, the argument given to ps is not supported. On my Debian Machine: 1 (103-103) 2(103-103) EUID RUID 103 103 103 103 0 0 (similar result when the user does not exist) 1 (999-999) 2(999-999) EUID RUID 999 999 999 999 0 0 On my FreeBSD machine: fork: Event not found.

[guest - Thu Jul 21 11:48:44 2005]: Show quoted text
Test #1: RHEL (Red Hat Enterprise Linux) 3 ES and perl-5.8.0-89.10. Logged in as root (uid)0) # grep amavis /etc/passwd amavis:x:503:503:amavisd-new:/var/amavis:/bin/bash # perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(503); \ Show quoted text
(0)(0) (0)(0) Logged in as amavis (uid=503): $ grep amavis /etc/passwd amavis:x:503:503:amavisd-new:/var/amavis:/bin/bash $ perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(503); \ Show quoted text
(503)(503) (503)(503) That amavisd-new-2.3.2 system hates Net::Server-0.88, but works fine with Net::Server-0.87. Test #2: Fedora Core 4 and perl-5.8.6-15. Logged in as root (uid=0): # grep amavis /etc/passwd amavis:x:506:506:AMaViS email virus scanner user:/home/amavis:/bin/sh # perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(506); \ print "($<)($>)\n"' (0)(0) (506)(506) Logged in as amavis (uid=506): $ perl -e 'use POSIX; print "($<)($>)\n"; POSIX::setuid(506); \ Show quoted text
(506)(506) (506)(506) This one has amavisd-new-2.3.2 and Net::Server-0.88 and they work fine. So, it looks like that problematic RHEL3ES + perl-5.8.0 returns wrong uid and gid values, when querying as a root. This is problem, when running amavisd-new-2.3.2 with Net::Server-0.88.