Date: Sun, 30 Apr 2000 10:04:06 +0300 (EEST) From: Adrian Penisoara <ady@warpnet.ro> To: Kris Kennaway <kris@FreeBSD.ORG> Cc: freebsd-security@FreeBSD.ORG Subject: Re: mail/imap-uw port: upgraded from 4.7b to 4.7c(1) [still 12.264] Message-ID: <Pine.BSF.4.10.10004301001340.36448-100000@ady.warpnet.ro> In-Reply-To: <Pine.BSF.4.21.0004292350060.7846-100000@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, On Sat, 29 Apr 2000, Kris Kennaway wrote: > On Sun, 30 Apr 2000, Adrian Penisoara wrote: > > > Hi, > > > > Could you please check out the new version committed yesterday ? > > Yeah, I will when I get the chance. THanks for the reminder :) > > > BTW, while we're at it: the port auditing folks should take a look at > > mlock sources (in imap-utils source tarball) -- it's a SGID executable! > > One would hope this is okay, given they imap-uw folks claim to have > performed a comprehensive audit on the set[ug]id parts of their code. Nope, they DON'T ! They just stated this is a sample locking utility with minimal auditing... from what I recall from the first time I included mlock in the port. > > Kris > Thanks, Ady (@freebsd.ady.ro) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10004301001340.36448-100000>