untaint mailman localpart

diff --git a/master b/master
index ad926f812da19d48f1baa7b42dcd880de156f0e3..54c9df1838d43d639958b05801f9c0265b756749 100644 (file)
--- a/master
+++ b/master
@@ -5,6 +5,7 @@
 #
 
 # For doing VERP on outgoing list traffic. Only if we actually do mailman on this host. 
+MAILMAN_UNTAINT_LOCALPART = ${lookup{$local_part}dsearch{MAILMAN_HOME/lists}{$value}fail}
 MAILMAN_UNTAINT_DOMAIN = ${lookup{$domain}dsearch{CLUSTER/mailman}{$value}fail}
 MAILMAN_UNTAINT_SENDER_DOMAIN = ${lookup{$sender_address_domain}dsearch{CLUSTER/mailman}{$value}fail}
 .ifdef MAILMAN_HOME
@@ -501,7 +502,7 @@ mailman_transport:
             '${if def:local_part_suffix \
                   {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
                   {post}}' \
-            $local_part
+            MAILMAN_UNTAINT_LOCALPART
   current_directory = MAILMAN_HOME
   home_directory = MAILMAN_HOME
   user = MAILMAN_UID