From owner-freebsd-bugs  Sun Mar 23 08:51:53 1997
Return-Path: <owner-bugs>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id IAA13236
          for bugs-outgoing; Sun, 23 Mar 1997 08:51:53 -0800 (PST)
Received: from sax.sax.de (sax.sax.de [193.175.26.33])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id IAA13230;
          Sun, 23 Mar 1997 08:51:39 -0800 (PST)
Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id RAA03302; Sun, 23 Mar 1997 17:51:19 +0100
Received: (from j@localhost)
	by uriah.heep.sax.de (8.8.5/8.8.5) id RAA17141;
	Sun, 23 Mar 1997 17:33:12 +0100 (MET)
Message-ID: <19970323173312.AN02657@uriah.heep.sax.de>
Date: Sun, 23 Mar 1997 17:33:12 +0100
From: j@uriah.heep.sax.de (J Wunsch)
To: peter@spinner.DIALix.COM (Peter Wemm)
Cc: dv@kis.ru (Dmitry Valdov), freebsd-bugs@freebsd.org,
        security-officer@freebsd.org
Subject: Re: sendmail can't create PID file because of owner permission of /var/run
References: <19970323162952.NW34878@uriah.heep.sax.de> <199703231611.AAA05625@spinner.DIALix.COM>
X-Mailer: Mutt 0.60_p2-3,5,8-9
Mime-Version: 1.0
X-Phone: +49-351-2012 669
X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F  93 21 E0 7D F9 12 D6 4E
Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
In-Reply-To: <199703231611.AAA05625@spinner.DIALix.COM>; from Peter Wemm on Mar 24, 1997 00:11:35 +0800
Sender: owner-bugs@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

As Peter Wemm wrote:

> Don't forget, the pid file is (or might become) an "option" in the
> .cf file..  ie: sendmail -o' 'PidFile=/tmp/sendmail.pid.  Quite what
> Eric has in mind, I am not sure.

Ah, right.

> I have a vague feeling that the reason for the safefopen() in the first
> place was for cases where the pid file was not stored in a "secure"
> directory, eg: /tmp, or a generic pid's directory that's mode 1777.

Hmm, but as it stands, it's always possible to create this file under
/tmp (since it's world-writable).  It's possible to store it in such
a directory even:

	d-------wx  nobody nobody

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)