From owner-freebsd-security Sat Sep 30 11:42:23 2000 Delivered-To: freebsd-security@freebsd.org Received: from green.dyndns.org (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id A36BB37B66D; Sat, 30 Sep 2000 11:42:19 -0700 (PDT) Received: from localhost (ci9ae8@localhost [127.0.0.1] (may be forged)) by green.dyndns.org (8.11.0/8.11.0) with ESMTP id e8UIgA543368; Sat, 30 Sep 2000 14:42:15 -0400 (EDT) (envelope-from green@FreeBSD.org) Message-Id: <200009301842.e8UIgA543368@green.dyndns.org> X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 To: Warner Losh Cc: Jordan Hubbard , Roman Shterenzon , Kris Kennaway , security@FreeBSD.org Subject: Re: cvs commit: ports/mail/pine4 Makefile (fwd) In-Reply-To: Message from Warner Losh of "Sat, 30 Sep 2000 12:16:26 MDT." <200009301816.MAA12880@harmony.village.org> From: "Brian F. Feldman" Date: Sat, 30 Sep 2000 14:42:09 -0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > : Another possibility might be to force pine into a > : chroot... I guess the only good advice to give if you HAVE to run pine is to > : run it inside a jail. > > I don't think that would work. > > Warner That is, one can create their own jail (or just chroot(8)... I should probably get user-chrooting reviewed ;) which they would use for running potentially evil things -- like reading e-mail with pine. It's not too difficult, but it's really easier just to switch to a better MUA. -- Brian Fundakowski Feldman \ FreeBSD: The Power to Serve! / green@FreeBSD.org `------------------------------' To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message