Date: Mon, 18 Nov 1996 17:23:49 +0100 From: Poul-Henning Kamp <phk@critter.tfs.com> To: Marc Slemko <marcs@znep.com> Cc: freebsd-security@freebsd.org Subject: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). Message-ID: <450.848334229@critter.tfs.com> In-Reply-To: Your message of "Mon, 18 Nov 1996 08:22:54 MST." <Pine.BSF.3.95.961118081010.4525A-100000@alive.ampr.ab.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <Pine.BSF.3.95.961118081010.4525A-100000@alive.ampr.ab.ca>, Marc Sle mko writes: >What does sendmail need to do WRT binding to ports that a webserver >doesn't? Programs such as webservers work quite well with a parent >process running as root that binds to the port and forks childs running as >some non-root uid to handle requests. Why couldn't (this part) of >sendmail's problems be fixed the same way? Sure, but I'd rather once and for all get rid of the root bit :-) -- Poul-Henning Kamp | phk@FreeBSD.ORG FreeBSD Core-team. http://www.freebsd.org/~phk | phk@login.dknet.dk Private mailbox. whois: [PHK] | phk@ref.tfs.com TRW Financial Systems, Inc. Future will arrive by its own means, progress not so.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?450.848334229>