Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 Mar 1997 20:29:49 +0100 (MET)
From:      Guido van Rooij <guido@gvr.win.tue.nl>
To:        joerg_wunsch@uriah.heep.sax.de
Cc:        dv@kis.ru, freebsd-bugs@freebsd.org, peter@spinner.DIALix.COM, security-officer@freebsd.org
Subject:   Re: sendmail can't create PID file because of owner permission of /var/run
Message-ID:  <199703231929.UAA02304@gvr.win.tue.nl>
In-Reply-To: <19970323153519.BW27841@uriah.heep.sax.de> from J Wunsch at "Mar 23, 97 03:35:19 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
J Wunsch wrote:
> 
> safefile() in sendmail/src/util.c goes great lengths to ensure files
> are only attempted to be opened if the permissions of the directory
> allow this.  Anyway, it looks as if it requires any directory to be
> world-writeable if the directory is not owned by the owner of the
> requesting process -- even if the owner is root.  I'm not sure
> wheather this is a bug or a feature.  The following diff fixes this,
> but i'm not 100 % sure wheather this fix is right or not.
> 

Best is to get this patch to Eric Allman. He's *the* person for this kind
of stuff.

-Guido



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199703231929.UAA02304>