From owner-freebsd-security Wed Jan 8 03:27:00 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id DAA28500 for security-outgoing; Wed, 8 Jan 1997 03:27:00 -0800 (PST) Received: from itesec.hsc.fr (root@itesec.hsc.fr [192.70.106.33]) by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id DAA28486 for ; Wed, 8 Jan 1997 03:26:50 -0800 (PST) Received: from sidhe.hsc.fr (pb@sidhe.hsc.fr [192.70.106.44]) by itesec.hsc.fr (8.8.4/8.8.4/itesec-1.9) with ESMTP id MAA07881; Wed, 8 Jan 1997 12:26:07 +0100 (MET) Received: (from pb@localhost) by sidhe.hsc.fr (8.8.Alpha.4/sidhe-new-1.7) id MAA01278; Wed, 8 Jan 1997 12:26:07 +0100 (MET) Message-ID: Date: Wed, 8 Jan 1997 12:26:06 +0100 From: Pierre.Beyssac@hsc.fr (Pierre Beyssac) To: proff@suburbia.net Cc: Guido.vanRooij@nl.cis.philips.com (Guido van Rooij), security@FreeBSD.ORG Subject: Re: sendmail running non-root SUCCESS! References: <199701080838.JAA06611@bsd.lss.cp.philips.com> <19970108094942.382.qmail@suburbia.net> X-Mailer: Mutt 0.50 Mime-Version: 1.0 In-Reply-To: <19970108094942.382.qmail@suburbia.net>; from proff@suburbia.net on Jan 8, 1997 20:49:42 +1100 Sender: owner-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk According to proff@suburbia.net: > > Yes. A program in a .forward will need to be executed under uid user. How > > is sendmail going to do that if it is not suid root? > > > qmail qmail qmail suboptimal uucp handling, suboptimal uucp handling, suboptimal uucp handling. Please please please, could we avoid a "qmail vs sendmail" flame war this time? This is a waste of time, plain and simple. -- Pierre.Beyssac@hsc.fr