Date: Tue, 5 Feb 2002 13:52:55 +0300 (MSK) From: "Artem 'Zazoobr' Ignatjev" <timon@memphis.mephi.ru> To: freebsd-security@FreeBSD.ORG, kuku@gilberto.physik.RWTH-Aachen.DE Subject: Re: .forward+ group writable directory Message-ID: <200202051052.g15AqtM86807@memphis.mephi.ru> In-Reply-To: <200202050920.g159KrP55937@gilberto.physik.RWTH-Aachen.DE>
next in thread | previous in thread | raw e-mail | index | archive | help
> From: Christoph Kukulies <kuku@gilberto.physik.RWTH-Aachen.DE> > To: freebsd-security@FreeBSD.ORG > Subject: .forward+ group writable directory > > Since two days my procmail filter isn't working anymore and I > see these logs in my maillog. > > It's FreeBSD 4.4 with ESMTP Sendmail 8.11.6/8.11.6 (the stock > that comes withthe distribution). Is it likely that I have been > hacked? I see otherwise no signs thereof. > > > Feb 5 00:00:04 host sendmail[52966]: g14N03M52963: forward /home/user/.forward.host+: Group writable directory > Feb 5 00:00:04 host sendmail[52966]: g14N03M52963: forward /home/user/.forward+: Group writable directory > Feb 5 00:00:04 host sendmail[52966]: g14N03M52963: forward /home/user/.forward.host: Group writable directory > Feb 5 00:00:04 host sendmail[52966]: g14N03M52963: forward /home/user/.forward: Group writable directory Sendmail treats group/world writable files/dirs (aliases, mail queue, etc) as insecure. You should either `chmod g-w /home/user' or read sendmail documentation (especially for security issues and "DontBlameSendmail" option). Sinceherely yours, Artem 'Zazoobr' Ignatjev. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200202051052.g15AqtM86807>