Skip Menu |

This queue is for tickets about the Sys-Hostname-Long CPAN distribution.

Report information
The Basics
Id: 17896
Status: open
Priority: 0/
Queue: Sys-Hostname-Long

People
Owner: Nobody in particular
Requestors: david.may [...] asggroup.com.au
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Possible bug in Sys-Hostname-Long
I am calling Sys::Hostname::Long from Mail::SpamAssassin::Plugin::SPF on Solaris 8, Perl version is 5.8.7. The SPF plugin does not work on all our Sun Solaris machines and I suspect the cause might be problem with Sys::Hostname::Long on Solaris. In some situations the SPF plugin in SpamAssassin reports the following error: [3903] dbg: spf: cannot load or create Mail::SPF::Query module: Insecure dependency in `` while running with -T switch at /usr /local/lib/perl5/site_perl/5.8.7/Sys/Hostname/Long.pm line 91. Possibly module Sys::Hostname::Long does not handle all the various Solaris hostname/domainname conventions that can occur. On one machine where hostname = "myhost.mydomain" and domainname = "" SPF module works. I.e. hostname is set to FQDN. On another machine where hostname = "myhost", domainname = "" or "mydomain" SPF module fails with error reported above. Also, I think the "su nobody hostname --fqdn" command, which Sys::Hostname::Long tries to run, may not work on Solaris 8 because the hostname command does not have a --fqdn option.
From: Larry Rosenbaum
On Tue Feb 28 01:43:56 2006, guest wrote: Show quoted text
> I am calling Sys::Hostname::Long from
Mail::SpamAssassin::Plugin::SPF Show quoted text
> on Solaris 8, Perl version is 5.8.7. The SPF plugin does not work on > all our Sun Solaris machines and I suspect the cause might be problem > with Sys::Hostname::Long on Solaris. > > In some situations the SPF plugin in SpamAssassin reports the > following error: > > [3903] dbg: spf: cannot load or create Mail::SPF::Query module: > Insecure dependency in `` while running with -T switch at /usr > /local/lib/perl5/site_perl/5.8.7/Sys/Hostname/Long.pm line 91.
The problem is this line: my $tmp = `hostname` . '.' . `domainname`; Perl apparently can't tell that the (tainted)output from hostname isn't getting passed to domainname so it gets flagged as insecure. It needs to be replaced by something like this: my $tmp = `hostname`; my $tmp2 = `domainname`; $tmp .= ".$tmp2";