From owner-freebsd-security  Thu Dec  3 12:59:51 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA21585
          for freebsd-security-outgoing; Thu, 3 Dec 1998 12:59:51 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA21570
          for <security@FreeBSD.ORG>; Thu, 3 Dec 1998 12:59:48 -0800 (PST)
          (envelope-from brett@lariat.org)
Received: (from brett@localhost)
	by lariat.lariat.org (8.8.8/8.8.6) id NAA04659;
	Thu, 3 Dec 1998 13:54:14 -0700 (MST)
Message-Id: <4.1.19981203135009.04047ea0@127.0.0.1>
X-Sender: brett@127.0.0.1
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 
Date: Thu, 03 Dec 1998 13:51:48 -0700
To: Robert Watson <robert+freebsd@cyrus.watson.org>,
        Bill Woodford <woodford@cc181716-a.hwrd1.md.home.com>
From: Brett Glass <brett@lariat.org>
Subject: Re: mail.local
Cc: ML FreeBSD Security <security@FreeBSD.ORG>
In-Reply-To: <Pine.BSF.3.96.981203123334.12137A-100000@fledge.watson.org
 >
References: <Pine.LNX.3.96.981203115141.7707B-100000@cc181716-a.hwrd1.md.home.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 12:36 PM 12/3/98 -0500, Robert Watson wrote:
 
>> Hmmm, if you remove it, I believe local mail delivery will cease due to
>> permission problems.

Why not use a group permission to allow access to mailboxes only? This would
contain the damage that could be done by subverting an suid program.

--Brett

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message