[exim] Re: tainted uux transport

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Jeremy Harris
Datum:  
To: exim-users
Betreff: [exim] Re: tainted uux transport
On 30/07/2023 18:30, Randy Bush via Exim-users wrote:
> 2023-07-30 14:23:11 1qQ7KA-000BIX-27 ** foo@??? R=force_uucp T=uux: Tainted
> arg 4 for uux transport command: '(@foo.com)'
>
> uux:
>    driver = pipe
>    command = "/usr/local/bin/uux - -r $host!rmail ($local_part_suffix@$domain)"
>    path = "/usr/local/bin:/usr/bin:/bin"
>    return_fail_output
>    user = uucp


The docs have notes on tainted variables, what you
are no longer permitted to do, and on obtaining untainted
information. Start with the Concept Index.

If the router that selects that transport is specific for
a single domain, that is the ideal place.

--
Cheers,
Jeremy

PS: I'm amazed that someone still uses UUCP

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/