Date: Thu, 3 Dec 1998 12:08:28 -0700 (MST) From: Jim Bourne <jbourne@affinity-systems.ab.ca> To: Bill Woodford <woodford@cc181716-a.hwrd1.md.home.com> Cc: ML FreeBSD Security <security@FreeBSD.ORG> Subject: Re: mail.local Message-ID: <Pine.LNX.3.96.981203120522.20374B-100000@cafe.affinity-systems.ab.ca> In-Reply-To: <Pine.LNX.3.96.981203115141.7707B-100000@cc181716-a.hwrd1.md.home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 3 Dec 1998, Bill Woodford wrote: > > On Wed, 2 Dec 1998, Dima Ruban wrote: > | Could somebody remind me of outcome of removing suid bit from mail.local > | discussion? > > Hmmm, if you remove it, I believe local mail delivery will cease due to > permission problems. If you remove the suid bit from mail.local, it cannot seteuid to the user which it is delivering mail as. Say your sendmail runs as user mail group mail, it exec's mail.local and feeds mail.local the text in question, mail.local then does a seteuid to the user the mail is being delivered to and then revokes all other root privledges and opens, writes, and closes the mail spool file. umm, IIRC that is... But then again, I use procmail anyways. it's much nicer having my mail filtered via procmail then all dumped in my spool file :) Regards, Jim > > -- > Bill Woodford * woodford@cc181716-a.hwrd1.md.home.com * ICQ:14076169 > Volunteer Coordinator, Otakon 99: Convention of Otaku Generation > "Windows Multitasking: Messing up several things at once." > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > -- James Bourne | Email:jbourne@affinity-systems.ab.ca Affinity Systems Inc. | WWW:http://www.affinty-systems.ab.ca Everything Unix | Linux-The choice of a GNU generation ---------------------------------------------------------------------- Unix System Administration, System programming, Network Administration To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.3.96.981203120522.20374B-100000>