[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: spamassassin: whitelist_from_rcvd ?!?!



On Fri, Sep 05, 2003 at 03:42:39PM -0500, Michael D Schleif wrote:
> Colin Watson <cjwatson@debian.org> [2003:09:05:21:08:07+0100] scribed:
> > Incidentally, why sudo? dpkg doesn't need any special privileges just to
> > search its database.
> 
>    # id
>    uid=1000(mds) gid=1000(mds)
>    groups=1000(mds),6(disk),29(audio),50(staff),1001(sambamount),1002(mysql)
> 
>    # dpkg -S /usr/sbin/dpkg-divert
>    bash: /usr/bin/dpkg: Permission denied
> 
> Is this because of tiger, or bastille?
> 
>    # ls -l /usr/bin/dpkg
>    -rwxr-x---    1 root     root       153944 Apr 26 15:19 /usr/bin/dpkg

Wow. Don't do that, then. Those permissions are daft; if a "security
tool" did that then you should stop using it immediately, as its authors
clearly have grave difficulties with the concept of a security boundary
and where to put it.

Cheers,

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]



Reply to: