From: root <root@bombadil.infradead.org>
Date: Tue, 14 Mar 2023 10:43:19 +0000 (-0700)
Subject: untaint mailman localpart
X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=0a105801b3c09bb7821eb53d17553b22422c0ee4;p=users%2Fdwmw2%2Feximconf.git

untaint mailman localpart
---

diff --git a/master b/master
index ad926f8..54c9df1 100644
--- a/master
+++ b/master
@@ -5,6 +5,7 @@
 #
 
 # For doing VERP on outgoing list traffic. Only if we actually do mailman on this host. 
+MAILMAN_UNTAINT_LOCALPART = ${lookup{$local_part}dsearch{MAILMAN_HOME/lists}{$value}fail}
 MAILMAN_UNTAINT_DOMAIN = ${lookup{$domain}dsearch{CLUSTER/mailman}{$value}fail}
 MAILMAN_UNTAINT_SENDER_DOMAIN = ${lookup{$sender_address_domain}dsearch{CLUSTER/mailman}{$value}fail}
 .ifdef MAILMAN_HOME
@@ -501,7 +502,7 @@ mailman_transport:
             '${if def:local_part_suffix \
                   {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
                   {post}}' \
-            $local_part
+            MAILMAN_UNTAINT_LOCALPART
   current_directory = MAILMAN_HOME
   home_directory = MAILMAN_HOME
   user = MAILMAN_UID