Date: Thu, 3 Dec 1998 13:08:33 -0700 From: Lyndon Nerenberg <lyndon@execmail.com> To: jbourne@affinity-systems.ab.ca Cc: woodford@cc181716-a.hwrd1.md.home.com, security@FreeBSD.ORG Subject: Re: mail.local Message-ID: <199812032008.NAA18594@rembrandt.esys.ca> In-Reply-To: <Pine.LNX.3.96.981203120522.20374B-100000@cafe.affinity-systems.ab.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On 3 Dec, Jim Bourne wrote: > > Say your sendmail runs as user mail group mail, it exec's mail.local and > feeds mail.local the text in question, mail.local then does a seteuid to the > user the mail is being delivered to and then revokes all other root > privledges and opens, writes, and closes the mail spool file. umm, IIRC > that is... Not any more. As of 8.9, mail.local has to handle multiple recipients (for LMTP). It explicitly chowns the mailbox files, and thus assumes it's being invoked as root. (Look inside the deliver() function for the details.) -- Finger lyndon@execmail.com for PGP key. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812032008.NAA18594>