Alexander Gromnitsky's Blog

exim 4.96 & procmail

Latest update:

After Fedora updated Exim to 4.96, my local mail stopped working.

2022-09-19 22:36:10 1oaMYs-000FMv-0w ** alex@a520.lan R=procmail T=procmail: Tainted arg 2 for procmail transport command: 'alex'
2022-09-19 22:36:10 1oaMYs-000FMv-0w Frozen (delivery error message)

Turns out, the default Exim config in Fedora 36 is not fully synced to the most recent Exim idiocy with 'tainted data'. In

# grep \"/usr/bin/procmail /etc/exim/exim.conf.rpmnew
  command = "/usr/bin/procmail -d $local_part"

the value of $local_part is extracted directly from email, hence it is under the control of an evil sender. In the Exim parlance, such a variable is called tainted.

To fix the nuisance, modify the command in 'procmail' transport to:

command = "/usr/bin/procmail -d $local_part_data"

Tags: ойті
Authors: ag