From owner-freebsd-security  Fri Jun  7 12:50:41 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id MAA15902
          for security-outgoing; Fri, 7 Jun 1996 12:50:41 -0700 (PDT)
Received: from who.cdrom.com (who.cdrom.com [204.216.27.3])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id MAA15897
          for <security@freebsd.org>; Fri, 7 Jun 1996 12:50:39 -0700 (PDT)
Received: from rocky.sri.MT.net (rocky.sri.MT.net [204.182.243.10])
          by who.cdrom.com (8.6.12/8.6.11) with ESMTP id MAA29698
          for <security@freebsd.org>; Fri, 7 Jun 1996 12:50:38 -0700
Received: (from nate@localhost) by rocky.sri.MT.net (8.6.12/8.6.12) id NAA00227; Fri, 7 Jun 1996 13:48:21 -0600
Date: Fri, 7 Jun 1996 13:48:21 -0600
From: Nate Williams <nate@sri.MT.net>
Message-Id: <199606071948.NAA00227@rocky.sri.MT.net>
To: Paul Traina <pst@shockwave.com>
Cc: Barnacle Wes <softweyr@xmission.com>, security@freebsd.org
Subject: Re: FreeBSD's /var/mail permissions 
In-Reply-To: <199606071725.KAA01419@precipice.shockwave.com>
References: <199606071542.JAA14520@xmission.xmission.com>
	<199606071725.KAA01419@precipice.shockwave.com>
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> Correction: Most MUAs do not need write access to this directory,
> so they are not SUID root.  They just work on the files.

Corretion: Actually, *most* MUA's that I'm aware of need write access to
the directory if they plan on doing any sort of mailbox locking, which
most decent MUA do.


Nate