From: Wietse Venema (no email)
Date: Thu May 08 2008 - 14:11:22 EDT
Richard Stockton:
> Hi postfix people,
>
> I am noticing an odd and somewhat disturbing thing on my FreeBSD
> postfix installations. When I redo my transport table,
>
> postmap /etc/postfix/transport
>
> and then do a "strings /etc/postfix/transport.db" I see not only
> the contents of the "transport" file, but also my entire master
> password file including the password hashes! That seems like a
> very bad thing. This occurs on all 8 of my FreeBSD postfix
> installations.
Apparently, some SYSTEM LIBRARY Berkeley DB routine writes
uninitialized memory to file. Postfix does not write Berkeley DB
files directly.
Have you sent a bug report to the FreeSBD bugs database?
Solaris had a similar problem years ago with the tar(1) command.
Not nice if you were putting tar files on anonymous FTP servers.
Wietse
|
|
|