From: Kris D. <kd...@vi...> - 2008-10-16 20:39:26
|
Jamie Cameron wrote: > I wonder if perhaps procmail-wrapper isn't being used on your system? I'm not certain on the interaction between Postfix, procmail, and Virtualmin's lookup script, but the critical error message is here: >> procmail: Assigning "VIRTUALMIN=" >> Insecure $ENV{PATH} while running with -T switch at >> /etc/webmin/virtual-server/lookup-domain.pl line 12. This indicates that, for whatever reason, Perl is running in taint mode - I would guess something, somewhere, is running setuid, causing it to automatically activate. You have to explicitly sanitize $ENV{PATH} *within* the script to fix this. (FWIW, this is probably a good thing to do *anyway*, even if it's still only something resembling a symptom of the real misconfiguration.) -kgd |