Bug 512534

Summary: amstatus outputs "Insecure dependency in printf ..." instead of printing status of running dump
Product: [Fedora] Fedora Reporter: sfgentoo
Component: amandaAssignee: Daniel Novotny <dnovotny>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 11CC: dnovotny
Target Milestone: ---   
Target Release: ---   
Hardware: i586   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-08-04 13:49:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
a patch none

Description sfgentoo 2009-07-18 19:39:18 UTC
Description of problem:
When executing amstatus with config name, it does not output the status of the running dump, instead this error message is shown:
"Insecure dependency in printf while running with -T switch at /usr/sbin/amstatus line 980."

Version-Release number of selected component (if applicable):
Arch       : i586
Version    : 2.6.0p2
Release    : 8.fc11

Steps to Reproduce:
1. SU to user amandabackup.
2. Type in amstatus [config]
  
Actual results:
===
-bash-4.0$ amstatus extdisk
Using /etc/amanda/extdisk/amdump.1
From Sat Jul 18 09:17:31 CEST 2009

Insecure dependency in printf while running with -T switch at /usr/sbin/amstatus line 980.
===

Expected results:
The status of the running dump.

Additional info:
Also seen this bug in debian:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504509
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510708
Perhaps an upstream issue? The first link seems to have an hint for solution.

Comment 1 Daniel Novotny 2009-07-22 12:49:05 UTC
a quick fix is to drop the "T" switch from the first line of the script (so it will become "#!/usr/bin/perl -w")

I will analyze if there's some more "secure" solution, but this can help you in the meanwhile. If all else fails, I will fix it this way.

Comment 2 Daniel Novotny 2009-08-04 13:30:01 UTC
Created attachment 356172 [details]
a patch

I inspected the upstream subversion repository and it seems they dropped the "T" switch, so we will do just the same

Comment 3 Daniel Novotny 2009-08-04 13:49:45 UTC
fixed in amanda-2.6.0p2-12.fc12