Re: Sendmail 8.7.5
Chris Fearnley writes:
> >> I've compiled sendmail 8.7.5 and I've got it running suid-mail! [I
> >> don't see any reason to run it suid-root --- especially given the
> >> history of vulnerabilities.] Then again I've barely tested it.
I will test it, too.
> Having sendmail suid-root, may require a suid-root mail-delivery
> agent. Anyone know if procmail, deliver, and/or mail.local are written
As far as I know deliver is written to be secure as suid-root. Otherwise it
wouldn't be able to read the user delivery files.
Michael
--
Michael Meskes
Lehrstuhl fuer angewandte Mathematik insb. Informatik
RWTH-Aachen, D-52056 Aachen, Germany
email: meskes@informatik.rwth-aachen.de
Reply to: