security/amavisd-new-2.13.1,1 won't start after upgrade

[Herbert J. Skuhra]

On Thu, May 22, 2025 at 07:21:30AM +0200, Xavier Humbert wrote:
> Hi,
> 
> Latest upgrade of amavisd-new broke on FreeBSD 13.5-STABLE, ports fromHEAD :
> 
> [root at numenor ~]# amavisd
> fetch_modules: error loading optional module Razor2/Client/Agent.pm:
>   Can't locate Getopt/Long.pm:   lib/Getopt/Long.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/mach/5.40/Razor2/Client/Agent.pm line 15.
>   BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/mach/5.40/Razor2/Client/Agent.pm line 15.
>   Compilation failed in require at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/DKIM.pm:
>   Can't locate Mail/DKIM.pm:   lib/Mail/DKIM.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Image/Info.pm:
>   Can't locate Image/Info.pm:   lib/Image/Info.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Image/Info/GIF.pm:
>   Can't locate Image/Info/GIF.pm:   lib/Image/Info/GIF.pm: Permission denied
> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Image/Info/JPEG.pm:
>   Can't locate Image/Info/JPEG.pm:   lib/Image/Info/JPEG.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Image/Info/PNG.pm:
>   Can't locate Image/Info/PNG.pm:   lib/Image/Info/PNG.pm: Permission denied
> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Image/Info/BMP.pm:
>   Can't locate Image/Info/BMP.pm:   lib/Image/Info/BMP.pm: Permission denied
> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Image/Info/TIFF.pm:
>   Can't locate Image/Info/TIFF.pm:   lib/Image/Info/TIFF.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF.pm:
>   Can't locate Mail/SPF.pm:   lib/Mail/SPF.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Server.pm:
>   Can't locate Mail/SPF/Server.pm:   lib/Mail/SPF/Server.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Request.pm:
>   Can't locate Mail/SPF/Request.pm:   lib/Mail/SPF/Request.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech.pm:
>   Can't locate Mail/SPF/Mech.pm:   lib/Mail/SPF/Mech.pm: Permission denied
> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/A.pm:
>   Can't locate Mail/SPF/Mech/A.pm:   lib/Mail/SPF/Mech/A.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/PTR.pm:
>   Can't locate Mail/SPF/Mech/PTR.pm:   lib/Mail/SPF/Mech/PTR.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/All.pm:
>   Can't locate Mail/SPF/Mech/All.pm:   lib/Mail/SPF/Mech/All.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/Exists.pm:
>   Can't locate Mail/SPF/Mech/Exists.pm:  lib/Mail/SPF/Mech/Exists.pm:
> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/IP4.pm:
>   Can't locate Mail/SPF/Mech/IP4.pm:   lib/Mail/SPF/Mech/IP4.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/IP6.pm:
>   Can't locate Mail/SPF/Mech/IP6.pm:   lib/Mail/SPF/Mech/IP6.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/Include.pm:
>   Can't locate Mail/SPF/Mech/Include.pm:  lib/Mail/SPF/Mech/Include.pm:
> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mech/MX.pm:
>   Can't locate Mail/SPF/Mech/MX.pm:   lib/Mail/SPF/Mech/MX.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mod.pm:
>   Can't locate Mail/SPF/Mod.pm:   lib/Mail/SPF/Mod.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mod/Exp.pm:
>   Can't locate Mail/SPF/Mod/Exp.pm:   lib/Mail/SPF/Mod/Exp.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/Mod/Redirect.pm:
>   Can't locate Mail/SPF/Mod/Redirect.pm:  lib/Mail/SPF/Mod/Redirect.pm:
> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/SenderIPAddrMech.pm:
>   Can't locate Mail/SPF/SenderIPAddrMech.pm:
>  lib/Mail/SPF/SenderIPAddrMech.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/v1/Record.pm:
>   Can't locate Mail/SPF/v1/Record.pm:  lib/Mail/SPF/v1/Record.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Mail/SPF/v2/Record.pm:
>   Can't locate Mail/SPF/v2/Record.pm:  lib/Mail/SPF/v2/Record.pm: Permission
> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module auto/NetAddr/IP/_compV6.al:
>   Can't locate auto/NetAddr/IP/_compV6.al:  lib/auto/NetAddr/IP/_compV6.al:
> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module auto/NetAddr/IP/short.al:
>   Can't locate auto/NetAddr/IP/short.al:  lib/auto/NetAddr/IP/short.al:
> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/NetAddr/IP/InetBase/inet_any2n.al:
>   Can't locate auto/NetAddr/IP/InetBase/inet_any2n.al:
>  lib/auto/NetAddr/IP/InetBase/inet_any2n.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/NetAddr/IP/InetBase/inet_n2ad.al:
>   Can't locate auto/NetAddr/IP/InetBase/inet_n2ad.al:
>  lib/auto/NetAddr/IP/InetBase/inet_n2ad.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/NetAddr/IP/InetBase/inet_n2dx.al:
>   Can't locate auto/NetAddr/IP/InetBase/inet_n2dx.al:
>  lib/auto/NetAddr/IP/InetBase/inet_n2dx.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/NetAddr/IP/InetBase/inet_ntoa.al:
>   Can't locate auto/NetAddr/IP/InetBase/inet_ntoa.al:
>  lib/auto/NetAddr/IP/InetBase/inet_ntoa.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/NetAddr/IP/InetBase/ipv6_aton.al:
>   Can't locate auto/NetAddr/IP/InetBase/ipv6_aton.al:
>  lib/auto/NetAddr/IP/InetBase/ipv6_aton.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/NetAddr/IP/InetBase/ipv6_ntoa.al:
>   Can't locate auto/NetAddr/IP/InetBase/ipv6_ntoa.al:
>  lib/auto/NetAddr/IP/InetBase/ipv6_ntoa.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/Crypt/OpenSSL/RSA/new_public_key.al:
>   Can't locate auto/Crypt/OpenSSL/RSA/new_public_key.al:
>  lib/auto/Crypt/OpenSSL/RSA/new_public_key.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/Crypt/OpenSSL/RSA/new_key_from_parameters.al:
>   Can't locate auto/Crypt/OpenSSL/RSA/new_key_from_parameters.al:
>  lib/auto/Crypt/OpenSSL/RSA/new_key_from_parameters.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/Crypt/OpenSSL/RSA/get_key_parameters.al:
>   Can't locate auto/Crypt/OpenSSL/RSA/get_key_parameters.al:
>  lib/auto/Crypt/OpenSSL/RSA/get_key_parameters.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module
> auto/Crypt/OpenSSL/RSA/import_random_seed.al:
>   Can't locate auto/Crypt/OpenSSL/RSA/import_random_seed.al:
>  lib/auto/Crypt/OpenSSL/RSA/import_random_seed.al: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> fetch_modules: error loading optional module Error.pm:
>   Can't locate Error.pm:   lib/Error.pm: Permission denied at
> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
> 
> I have rebuilt these modules, with no success.
> 
> eg :
> 
> [root at numenor ~]# locate Getopt/Long.pm
> /usr/local/lib/perl5/5.40/Getopt/Long.pm
> /usr/local/lib/perl5/site_perl/Getopt/Long.pm
> 
> [root at numenor ~]# ll /usr/local/lib/perl5/5.40/Getopt/Long.pm
> /usr/local/lib/perl5/site_perl/Getopt/Long.pm
> -r--r--r--  1 root  wheel  83027 May 16 14:59
> /usr/local/lib/perl5/5.40/Getopt/Long.pm
> -rw-r--r--  1 root  wheel  83079 Jun 11  2024
> /usr/local/lib/perl5/site_perl/Getopt/Long.pm
> 
> I don't understand the "permission denied" issue

Does this also happen with the default amavisd.conf?
Did you follow the instructions in /usr/ports/UPDATING (20231017)? Does
amavisd work if you remove razor-agents? Have you tried a clean build
instead of updating?