Bug 512534 - amstatus outputs "Insecure dependency in printf ..." instead of printing status of running dump
Summary: amstatus outputs "Insecure dependency in printf ..." instead of printing stat...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: amanda
Version: 11
Hardware: i586
OS: Linux
low
medium
Target Milestone: ---
Assignee: Daniel Novotny
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-07-18 19:39 UTC by sfgentoo
Modified: 2009-08-04 13:49 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-08-04 13:49:45 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
a patch (314 bytes, patch)
2009-08-04 13:30 UTC, Daniel Novotny
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Debian BTS 504509 0 None None None Never

Description sfgentoo 2009-07-18 19:39:18 UTC
Description of problem:
When executing amstatus with config name, it does not output the status of the running dump, instead this error message is shown:
"Insecure dependency in printf while running with -T switch at /usr/sbin/amstatus line 980."

Version-Release number of selected component (if applicable):
Arch       : i586
Version    : 2.6.0p2
Release    : 8.fc11

Steps to Reproduce:
1. SU to user amandabackup.
2. Type in amstatus [config]
  
Actual results:
===
-bash-4.0$ amstatus extdisk
Using /etc/amanda/extdisk/amdump.1
From Sat Jul 18 09:17:31 CEST 2009

Insecure dependency in printf while running with -T switch at /usr/sbin/amstatus line 980.
===

Expected results:
The status of the running dump.

Additional info:
Also seen this bug in debian:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504509
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510708
Perhaps an upstream issue? The first link seems to have an hint for solution.

Comment 1 Daniel Novotny 2009-07-22 12:49:05 UTC
a quick fix is to drop the "T" switch from the first line of the script (so it will become "#!/usr/bin/perl -w")

I will analyze if there's some more "secure" solution, but this can help you in the meanwhile. If all else fails, I will fix it this way.

Comment 2 Daniel Novotny 2009-08-04 13:30:01 UTC
Created attachment 356172 [details]
a patch

I inspected the upstream subversion repository and it seems they dropped the "T" switch, so we will do just the same

Comment 3 Daniel Novotny 2009-08-04 13:49:45 UTC
fixed in amanda-2.6.0p2-12.fc12


Note You need to log in before you can comment on or make changes to this bug.