From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Jul 26 15:20:02 2007 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AF65316A420 for ; Thu, 26 Jul 2007 15:20:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 8DA1B13C478 for ; Thu, 26 Jul 2007 15:20:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.1/8.14.1) with ESMTP id l6QFK2Tm094649 for ; Thu, 26 Jul 2007 15:20:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.1/8.14.1/Submit) id l6QFK2iF094648; Thu, 26 Jul 2007 15:20:02 GMT (envelope-from gnats) Resent-Date: Thu, 26 Jul 2007 15:20:02 GMT Resent-Message-Id: <200707261520.l6QFK2iF094648@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ernst de Haan Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 96E6616A41F for ; Thu, 26 Jul 2007 15:10:16 +0000 (UTC) (envelope-from znerd@FreeBSD.org) Received: from sumo.dreamhost.com (sumo.dreamhost.com [66.33.216.29]) by mx1.freebsd.org (Postfix) with ESMTP id 8219E13C481 for ; Thu, 26 Jul 2007 15:10:16 +0000 (UTC) (envelope-from znerd@FreeBSD.org) Received: from spaceymail-a2.g.dreamhost.com (sd-green-bigip-83.dreamhost.com [208.97.132.83]) by sumo.dreamhost.com (Postfix) with ESMTP id 92AD1179406 for ; Thu, 26 Jul 2007 07:39:36 -0700 (PDT) Received: from andes.pensioenpage.com (unknown [217.148.84.60]) by spaceymail-a2.g.dreamhost.com (Postfix) with ESMTP id E965E10A02B for ; Thu, 26 Jul 2007 07:39:35 -0700 (PDT) Received: by andes.pensioenpage.com (sSMTP sendmail emulation); Thu, 26 Jul 2007 16:39:33 +0200 Message-Id: <20070726143935.E965E10A02B@spaceymail-a2.g.dreamhost.com> Date: Thu, 26 Jul 2007 16:39:33 +0200 From: Ernst de Haan To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/114945: [request] Protect mail/ssmtp configuration files X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Ernst de Haan List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jul 2007 15:20:02 -0000 >Number: 114945 >Category: ports >Synopsis: [request] Protect mail/ssmtp configuration files >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Jul 26 15:20:02 GMT 2007 >Closed-Date: >Last-Modified: >Originator: Ernst de Haan >Release: FreeBSD 6.2-RELEASE-p6 amd64 >Organization: >Environment: System: FreeBSD andes.pensioenpage.com 6.2-RELEASE-p6 FreeBSD 6.2-RELEASE-p6 #2: Wed Jul 25 11:33:08 CEST 2007 root@andes.pensioenpage.com:/usr/obj/usr/src/sys/ANDES amd64 >Description: mail/ssmtp is a minimalistic tool that allows sending of e-mail from the host it is installed on, using the SMTP services provided by another host. The following would -in my opinion- be a normal situation: 1. the SMTP service requires SSL; 2. the SMTP service requires authentication; 3. the authentication details are considered confidential. This is hard to accomplish with the current mail/ssmtp port, since the /usr/local/etc/ssmtp.conf file is world-readable. This is required, since the ssmtp binary runs as the current user. Hereby I request a solution is implemented for this. I propose the following: 1. During installation, add a user 'ssmtp' with no home directory, password and shell 2. Protect the /usr/local/etc/ssmtp/ directory by setting owner=ssmtp, group=wheel and permissions=rwxr-x---, so outside wheel nobody can read the files. 3. Make the 'ssmtp' executable owned by the user 'ssmtp' and mark it SUID. >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: