From owner-cvs-ports@FreeBSD.ORG  Tue May 25 03:24:03 2004
Return-Path: <owner-cvs-ports@FreeBSD.ORG>
Delivered-To: cvs-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 1BE2E16A4CE; Tue, 25 May 2004 03:24:03 -0700 (PDT)
Received: from flappie.debank.tv (flappie.debank.tv [212.206.127.42])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id B4BE243D1F; Tue, 25 May 2004 03:24:02 -0700 (PDT)
	(envelope-from rob@debank.tv)
Received: from localhost (localhost.debank.tv [127.0.0.1])
	by flappie.debank.tv (Postfix) with ESMTP id A8A7352C0;
	Tue, 25 May 2004 12:23:59 +0200 (CEST)
Received: from flappie.debank.tv ([127.0.0.1])
 by localhost (flappie.debank.tv [127.0.0.1]) (amavisd-new, port 10024)
 with LMTP id 57055-01; Tue, 25 May 2004 12:23:56 +0200 (CEST)
Received: by flappie.debank.tv (Postfix, from userid 80)
	id 48B1352BC; Tue, 25 May 2004 12:23:56 +0200 (CEST)
Received: from 193.79.18.58
        (SquirrelMail authenticated user rob@debank.tv)
        by debank.tv with HTTP;
        Tue, 25 May 2004 12:23:56 +0200 (CEST)
Message-ID: <61184.193.79.18.58.1085480636.squirrel@debank.tv>
In-Reply-To: <40B31D4A.5080607@fillmore-labs.com>
References: <200405242302.i4ON2NcJ063759@repoman.freebsd.org>      
    <ygehdu4ubgm.wl%ume@FreeBSD.org>   
    <52001.193.79.18.58.1085477488.squirrel@debank.tv>   
    <40B3167F.8060509@fillmore-labs.com>
    <50813.193.79.18.58.1085479430.squirrel@debank.tv>
    <40B31D4A.5080607@fillmore-labs.com>
Date: Tue, 25 May 2004 12:23:56 +0200 (CEST)
From: rob@debank.tv
To: "Oliver Eikemeier" <eikemeier@fillmore-labs.com>
User-Agent: SquirrelMail/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-Virus-Scanned: by amavisd-new at debank.tv
cc: rob@debank.tv
cc: cvs-ports@freebsd.org
cc: Pav Lucistnik <pav@freebsd.org>
cc: Hajimu UMEMOTO <ume@freebsd.org>
cc: ports-committers@freebsd.org
Subject: Re: cvs commit: ports/security/clamav-devel [...] pkg-install [...]
X-BeenThere: cvs-ports@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the ports tree <cvs-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-ports>
List-Post: <mailto:cvs-ports@freebsd.org>
List-Help: <mailto:cvs-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-ports>,
	<mailto:cvs-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 25 May 2004 10:24:03 -0000

> rob@debank.tv wrote:

--8<----
snipped
--8<----

>>>I still don't get the purpose of not allowing non-root processes
>>>to use clamav. This would break my exim installation, fortunately
>>>I'm using security/clamav, where this change hasn't been made.
>>>
>>>-Oliver
>>
>> Isn't there a security risk allowing every user to read the clamd socket
>> ?
>> (that's why I made this change).
>
> None that I would be aware of. Of course local users could run a
> denial-of-service
> attack using clamdscan, but I don't think this is an adequate counter
> measure.
>
> What made you think that having every user being able to read the clamd
> socket is a security risk?
>
> -Oliver
>

Doesn't the scanned e-mail pass through the socket allowing every user to
read all scanned e-mails ?
(I could be very wrong here)

Rob