From owner-freebsd-bugs  Sun Mar 23 11:30:33 1997
Return-Path: <owner-bugs>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id LAA22682
          for bugs-outgoing; Sun, 23 Mar 1997 11:30:33 -0800 (PST)
Received: from gvr.win.tue.nl (root@gvr.win.tue.nl [131.155.210.19])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id LAA22669;
          Sun, 23 Mar 1997 11:30:20 -0800 (PST)
Received: (from guido@localhost) by gvr.win.tue.nl (8.8.5/8.8.2) id UAA02304; Sun, 23 Mar 1997 20:29:49 +0100 (MET)
From: Guido van Rooij <guido@gvr.win.tue.nl>
Message-Id: <199703231929.UAA02304@gvr.win.tue.nl>
Subject: Re: sendmail can't create PID file because of owner permission of /var/run
In-Reply-To: <19970323153519.BW27841@uriah.heep.sax.de> from J Wunsch at "Mar 23, 97 03:35:19 pm"
To: joerg_wunsch@uriah.heep.sax.de
Date: Sun, 23 Mar 1997 20:29:49 +0100 (MET)
Cc: dv@kis.ru, freebsd-bugs@freebsd.org, peter@spinner.DIALix.COM,
        security-officer@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-bugs@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

J Wunsch wrote:
> 
> safefile() in sendmail/src/util.c goes great lengths to ensure files
> are only attempted to be opened if the permissions of the directory
> allow this.  Anyway, it looks as if it requires any directory to be
> world-writeable if the directory is not owned by the owner of the
> requesting process -- even if the owner is root.  I'm not sure
> wheather this is a bug or a feature.  The following diff fixes this,
> but i'm not 100 % sure wheather this fix is right or not.
> 

Best is to get this patch to Eric Allman. He's *the* person for this kind
of stuff.

-Guido