Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Dec 2017 20:34:15 +0100
From:      Matthias Apitz <guru@unixarea.de>
To:        Warren Block <wblock@wonkity.com>
Cc:        freebsd-ports@freebsd.org
Subject:   Re: Procmail Vulnerabilities check
Message-ID:  <20171211193415.GA3314@c720-r314251>
In-Reply-To: <alpine.BSF.2.21.1712111118470.98435@wonkity.com>
References:  <fb3d23c5-e32d-452a-a0c3-c3cb12340054@cloudzeeland.nl> <a66d1c33-e405-d9e8-d9c3-2738b5e66887@cloudzeeland.nl> <alpine.BSF.2.21.1712080956580.41281@wonkity.com> <20171208180905.GA96560@troutmask.apl.washington.edu> <alpine.BSF.2.21.1712081111070.41281@wonkity.com> <20171208193011.GA2203@c720-r314251> <alpine.BSF.2.21.1712081511530.41281@wonkity.com> <20171208223849.GA2171@c720-r314251> <65cf5e92-948e-4aff-857b-539cbae290b4@unixarea.de> <alpine.BSF.2.21.1712111118470.98435@wonkity.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

El d=C3=ADa lunes, diciembre 11, 2017 a las 11:26:44a. m. -0700, Warren Blo=
ck escribi=C3=B3:

> > Warren, you have not got my point: Why specfying '-d ${USER}' is requir=
ed in=20
> > a per user file in its HOME?

The maildrop is started as the user 'foo' by a line in a file ~foo/.forward,
as you say:

maildrop -d foo

and this '-d foo' is IMHO completely superfluous, because the maildrop coul=
d do
by its own a getuid(2) and a user 'foo' will never run (and perhaps can
not run due to lack of permissions) something like '-d bla'.

Do you copy me?

	matthias


--=20
Matthias Apitz, =E2=9C=89 guru@unixarea.de, =E2=8C=82 http://www.unixarea.d=
e/  =F0=9F=93=B1 +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub

--+QahgC5+KEYLbs62
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=pgcw
-----END PGP SIGNATURE-----

--+QahgC5+KEYLbs62--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20171211193415.GA3314>