[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Sendmail 8.7.5



Chris Fearnley writes:
> >> I've compiled sendmail 8.7.5 and I've got it running suid-mail!  [I
> >> don't see any reason to run it suid-root --- especially given the
> >> history of vulnerabilities.]  Then again I've barely tested it.

I will test it, too.

> Having sendmail suid-root, may require a suid-root mail-delivery
> agent.  Anyone know if procmail, deliver, and/or mail.local are written

As far as I know deliver is written to be secure as suid-root. Otherwise it
wouldn't be able to read the user delivery files.

Michael

-- 
Michael Meskes 
Lehrstuhl fuer angewandte Mathematik insb. Informatik
RWTH-Aachen, D-52056 Aachen, Germany
email: meskes@informatik.rwth-aachen.de


Reply to: