From owner-freebsd-security Fri Apr 30 9:36: 8 1999 Delivered-To: freebsd-security@freebsd.org Received: from noop.colo.erols.net (noop.colo.erols.net [207.96.1.150]) by hub.freebsd.org (Postfix) with ESMTP id C746115990 for ; Fri, 30 Apr 1999 09:35:54 -0700 (PDT) (envelope-from gjp@noop.colo.erols.net) Received: from localhost ([127.0.0.1] helo=noop.colo.erols.net) by noop.colo.erols.net with esmtp (Exim 2.12 #1) id 10dGFu-000GpF-00; Fri, 30 Apr 1999 12:35:14 -0400 To: "Pedro J. Lobo" Cc: freebsd-security@freebsd.org From: "Gary Palmer" Subject: Re: Does mail.local need to be setuid-root? In-reply-to: Your message of "Fri, 30 Apr 1999 15:47:18 +0200." Date: Fri, 30 Apr 1999 12:35:13 -0400 Message-ID: <64680.925490113@noop.colo.erols.net> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org "Pedro J. Lobo" wrote in message ID : > The problem is that you cand send mail to a user that is over quota, and > the system will append the new message to its inbox (located in /var/mail, > as by default). Indeed, root can append data to a file that belongs to a > user that is over quota. Hrm. I thought this had been fixed. Anyhow, a temporary workaround is to use procmail as your local delivery agent. Gary -- Gary Palmer FreeBSD Core Team Member FreeBSD: Turning PC's into workstations. See http://www.FreeBSD.ORG/ for info To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message