From 7c03ae1f0e862f1c07306abd9ef98201beebd603 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Wed, 24 Feb 2016 15:02:58 +0200
Subject: [PATCH] spamassassin: Fix "Insecure dependency" error from ClamAV
 plugin.

---
 spamassassin/files/ClamAV.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/spamassassin/files/ClamAV.pm b/spamassassin/files/ClamAV.pm
index 532f41d..1d98c99 100644
--- a/spamassassin/files/ClamAV.pm
+++ b/spamassassin/files/ClamAV.pm
@@ -78,7 +78,7 @@ sub check_clamav {
 
     my $socket = IO::Socket::UNIX->new(
 	Type => SOCK_STREAM,
-	Peer => $self->{main}->{conf}->{clamav_socket}
+	Peer => Mail::SpamAssassin::Util::untaint_file_path($permsg->{conf}->{clamav_socket})
         ) or do {
             $permsg->set_tag("CLAMAV", "Error");
             info("ClamAV: Failed to connect socket, skipping virus check");