From owner-freebsd-security  Fri Jun  8 13:38:59 2001
Delivered-To: freebsd-security@freebsd.org
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by hub.freebsd.org (Postfix) with ESMTP id EDDB137B401
	for <freebsd-security@FreeBSD.ORG>; Fri,  8 Jun 2001 13:38:55 -0700 (PDT)
	(envelope-from gshapiro@gshapiro.net)
Received: from horsey.gshapiro.net (gshapiro@localhost [127.0.0.1])
	by horsey.gshapiro.net (8.12.0.Beta11/8.12.0.Beta11) with ESMTP id f58Kcs4N068068
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Fri, 8 Jun 2001 13:38:54 -0700 (PDT)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.0.Beta11/8.12.0.Beta11) id f58KcsTr068065;
	Fri, 8 Jun 2001 13:38:54 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15137.14301.996243.90366@horsey.gshapiro.net>
Date: Fri, 8 Jun 2001 13:38:53 -0700
From: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
To: Lyndon Nerenberg <lyndon@orthanc.ab.ca>
Cc: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>,
	Peter Pentchev <roam@orbitel.bg>, freebsd-security@FreeBSD.ORG
Subject: Re: /bin/rmail (was: root & toor) 
In-Reply-To: <200106081936.f58Jaq556650@orthanc.ab.ca>
References: <200106081914.f58JEq556483@orthanc.ab.ca>
	<200106081936.f58Jaq556650@orthanc.ab.ca>
X-Mailer: VM 6.92 under 21.5  (beta1) "anise" XEmacs Lucid
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Lyndon> The only other issue is local execution of /bin/rmail by
Lyndon> programs other than uuxqt. A grep through the source tree
Lyndon> doesn't show any other program invoking rmail.

lyndon> And of course I meant "other than sendmail." 

sendmail doesn't invoke rmail.  rmail invokes sendmail.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message