From owner-freebsd-security  Tue Jun 11 13:20:11 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id NAA23445
          for security-outgoing; Tue, 11 Jun 1996 13:20:11 -0700 (PDT)
Received: from post.io.org (post.io.org [198.133.36.6])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id NAA23433
          for <security@freebsd.org>; Tue, 11 Jun 1996 13:20:09 -0700 (PDT)
Received: from zap.io.org (taob@zap.io.org [198.133.36.81]) by post.io.org (8.7.5/8.7.3) with SMTP id QAA06632; Tue, 11 Jun 1996 16:18:49 -0400 (EDT)
Date: Tue, 11 Jun 1996 16:19:51 -0400 (EDT)
From: Brian Tao <taob@io.org>
To: Nathan Lawson <nlawson@kdat.csc.calpoly.edu>
cc: security@freebsd.org
Subject: Re: setuid root sendmail vs. mode 1733 /var/spool/mqueue?
In-Reply-To: <199606111923.MAA21929@kdat.calpoly.edu>
Message-ID: <Pine.NEB.3.92.960611161127.10262A-100000@zap.io.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Tue, 11 Jun 1996, Nathan Lawson wrote:
>
> Next time sendmail -q runs, it executes my commands as root.

    Even with a modified prog delivery agent?

Mprog,          P=/usr/bin/false, F=lsDFMoeu, S=10/30, R=20/40, D=$z:/,
                T=X-Unix,
                A=sh -c $u

--
Brian Tao (BT300, taob@io.org, taob@ican.net)
Systems and Network Administrator, Internet Canada Corp.
"Though this be madness, yet there is method in't"