[exim] Tainted filenames?

Página Principal
Apagar esta mensagem
Responder a esta mensagem
Autor: Marco Gaiarin
Data:  
Para: exim-users
Assunto: [exim] Tainted filenames?

I'm 'de-tainting' my old exim config file, but i've found a trouble.

I've a transport that have:

    dkim_private_key = ${if exists{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{/etc/exim4/dkim/DKIM_DOMAIN-DKIM_SELECTOR-private.pem}{0}}


that lead to:

    2024-08-22 12:19:34 1sh4uf-000Dka-JC Warning: Tainted filename '/etc/exim4/dkim/lists.pnlug.it-XXXX-private.pem'


clearly 'DKIM_DOMAIN' and 'DKIM_SELECTOR' are macros.


How can i detaint it? Thanks.

--



--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/