security/amavisd-new-2.13.1,1 won't start after upgrade

[Xavier Humbert]

Le 22/05/2025 08:48, Herbert J. Skuhra a écrit :
> On Thu, May 22, 2025 at 07:21:30AM +0200, Xavier Humbert wrote:
>> Hi,
>>
>> Latest upgrade of amavisd-new broke on FreeBSD 13.5-STABLE, ports fromHEAD :
>>
>> [root at numenor ~]# amavisd
>> fetch_modules: error loading optional module Razor2/Client/Agent.pm:
>>    Can't locate Getopt/Long.pm:   lib/Getopt/Long.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/mach/5.40/Razor2/Client/Agent.pm line 15.
>>    BEGIN failed--compilation aborted at
>> /usr/local/lib/perl5/site_perl/mach/5.40/Razor2/Client/Agent.pm line 15.
>>    Compilation failed in require at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/DKIM.pm:
>>    Can't locate Mail/DKIM.pm:   lib/Mail/DKIM.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Image/Info.pm:
>>    Can't locate Image/Info.pm:   lib/Image/Info.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Image/Info/GIF.pm:
>>    Can't locate Image/Info/GIF.pm:   lib/Image/Info/GIF.pm: Permission denied
>> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Image/Info/JPEG.pm:
>>    Can't locate Image/Info/JPEG.pm:   lib/Image/Info/JPEG.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Image/Info/PNG.pm:
>>    Can't locate Image/Info/PNG.pm:   lib/Image/Info/PNG.pm: Permission denied
>> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Image/Info/BMP.pm:
>>    Can't locate Image/Info/BMP.pm:   lib/Image/Info/BMP.pm: Permission denied
>> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Image/Info/TIFF.pm:
>>    Can't locate Image/Info/TIFF.pm:   lib/Image/Info/TIFF.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF.pm:
>>    Can't locate Mail/SPF.pm:   lib/Mail/SPF.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Server.pm:
>>    Can't locate Mail/SPF/Server.pm:   lib/Mail/SPF/Server.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Request.pm:
>>    Can't locate Mail/SPF/Request.pm:   lib/Mail/SPF/Request.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech.pm:
>>    Can't locate Mail/SPF/Mech.pm:   lib/Mail/SPF/Mech.pm: Permission denied
>> at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/A.pm:
>>    Can't locate Mail/SPF/Mech/A.pm:   lib/Mail/SPF/Mech/A.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/PTR.pm:
>>    Can't locate Mail/SPF/Mech/PTR.pm:   lib/Mail/SPF/Mech/PTR.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/All.pm:
>>    Can't locate Mail/SPF/Mech/All.pm:   lib/Mail/SPF/Mech/All.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/Exists.pm:
>>    Can't locate Mail/SPF/Mech/Exists.pm:  lib/Mail/SPF/Mech/Exists.pm:
>> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/IP4.pm:
>>    Can't locate Mail/SPF/Mech/IP4.pm:   lib/Mail/SPF/Mech/IP4.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/IP6.pm:
>>    Can't locate Mail/SPF/Mech/IP6.pm:   lib/Mail/SPF/Mech/IP6.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/Include.pm:
>>    Can't locate Mail/SPF/Mech/Include.pm:  lib/Mail/SPF/Mech/Include.pm:
>> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mech/MX.pm:
>>    Can't locate Mail/SPF/Mech/MX.pm:   lib/Mail/SPF/Mech/MX.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mod.pm:
>>    Can't locate Mail/SPF/Mod.pm:   lib/Mail/SPF/Mod.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mod/Exp.pm:
>>    Can't locate Mail/SPF/Mod/Exp.pm:   lib/Mail/SPF/Mod/Exp.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/Mod/Redirect.pm:
>>    Can't locate Mail/SPF/Mod/Redirect.pm:  lib/Mail/SPF/Mod/Redirect.pm:
>> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/SenderIPAddrMech.pm:
>>    Can't locate Mail/SPF/SenderIPAddrMech.pm:
>>   lib/Mail/SPF/SenderIPAddrMech.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/v1/Record.pm:
>>    Can't locate Mail/SPF/v1/Record.pm:  lib/Mail/SPF/v1/Record.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Mail/SPF/v2/Record.pm:
>>    Can't locate Mail/SPF/v2/Record.pm:  lib/Mail/SPF/v2/Record.pm: Permission
>> denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module auto/NetAddr/IP/_compV6.al:
>>    Can't locate auto/NetAddr/IP/_compV6.al:  lib/auto/NetAddr/IP/_compV6.al:
>> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module auto/NetAddr/IP/short.al:
>>    Can't locate auto/NetAddr/IP/short.al:  lib/auto/NetAddr/IP/short.al:
>> Permission denied at /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/NetAddr/IP/InetBase/inet_any2n.al:
>>    Can't locate auto/NetAddr/IP/InetBase/inet_any2n.al:
>>   lib/auto/NetAddr/IP/InetBase/inet_any2n.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/NetAddr/IP/InetBase/inet_n2ad.al:
>>    Can't locate auto/NetAddr/IP/InetBase/inet_n2ad.al:
>>   lib/auto/NetAddr/IP/InetBase/inet_n2ad.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/NetAddr/IP/InetBase/inet_n2dx.al:
>>    Can't locate auto/NetAddr/IP/InetBase/inet_n2dx.al:
>>   lib/auto/NetAddr/IP/InetBase/inet_n2dx.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/NetAddr/IP/InetBase/inet_ntoa.al:
>>    Can't locate auto/NetAddr/IP/InetBase/inet_ntoa.al:
>>   lib/auto/NetAddr/IP/InetBase/inet_ntoa.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/NetAddr/IP/InetBase/ipv6_aton.al:
>>    Can't locate auto/NetAddr/IP/InetBase/ipv6_aton.al:
>>   lib/auto/NetAddr/IP/InetBase/ipv6_aton.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/NetAddr/IP/InetBase/ipv6_ntoa.al:
>>    Can't locate auto/NetAddr/IP/InetBase/ipv6_ntoa.al:
>>   lib/auto/NetAddr/IP/InetBase/ipv6_ntoa.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/Crypt/OpenSSL/RSA/new_public_key.al:
>>    Can't locate auto/Crypt/OpenSSL/RSA/new_public_key.al:
>>   lib/auto/Crypt/OpenSSL/RSA/new_public_key.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/Crypt/OpenSSL/RSA/new_key_from_parameters.al:
>>    Can't locate auto/Crypt/OpenSSL/RSA/new_key_from_parameters.al:
>>   lib/auto/Crypt/OpenSSL/RSA/new_key_from_parameters.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/Crypt/OpenSSL/RSA/get_key_parameters.al:
>>    Can't locate auto/Crypt/OpenSSL/RSA/get_key_parameters.al:
>>   lib/auto/Crypt/OpenSSL/RSA/get_key_parameters.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module
>> auto/Crypt/OpenSSL/RSA/import_random_seed.al:
>>    Can't locate auto/Crypt/OpenSSL/RSA/import_random_seed.al:
>>   lib/auto/Crypt/OpenSSL/RSA/import_random_seed.al: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>> fetch_modules: error loading optional module Error.pm:
>>    Can't locate Error.pm:   lib/Error.pm: Permission denied at
>> /usr/local/lib/perl5/site_perl/Amavis/Boot.pm line 77.
>>
>> I have rebuilt these modules, with no success.
>>
>> eg :
>>
>> [root at numenor ~]# locate Getopt/Long.pm
>> /usr/local/lib/perl5/5.40/Getopt/Long.pm
>> /usr/local/lib/perl5/site_perl/Getopt/Long.pm
>>
>> [root at numenor ~]# ll /usr/local/lib/perl5/5.40/Getopt/Long.pm
>> /usr/local/lib/perl5/site_perl/Getopt/Long.pm
>> -r--r--r--  1 root  wheel  83027 May 16 14:59
>> /usr/local/lib/perl5/5.40/Getopt/Long.pm
>> -rw-r--r--  1 root  wheel  83079 Jun 11  2024
>> /usr/local/lib/perl5/site_perl/Getopt/Long.pm
>>
>> I don't understand the "permission denied" issue
> Does this also happen with the default amavisd.conf?
Yes
> Did you follow the instructions in /usr/ports/UPDATING (20231017)?
Yes, I did
> Does amavisd work if you remove razor-agents?
No it doesn't
> Have you tried a clean build instead of updating?
Just did
# pkg delete security/amavisd-new
# cd /usr/ports/security/amavisd-new
# make install clean

And it works ! I just don't understand what happened... Another IT 
mystery 🙂

Thanks for your help, Herbert !

Regards,

Xavier

-- 
Xavier HUMBERT - Unix/Win/MacOSX Sysadmin/Network Engineer
https://www.amdh.fr