procmail
[Top] [All Lists]

Re: Is this a procmail-3.11pre6 security problem?

1997-04-28 11:55:00
"Jim O'Dell" <jim(_at_)ecs(_dot_)fullerton(_dot_)edu> wrote:
      I've just added procmaili-3.11pre6 on a Solaris 2.5 system
  with sendmail-8.8.2. I've noticed when procmail creates a new file 
  (i.e. IN.testing) the newly created file has permissions 600 and 
  has the proper user but NOT the proper group. The new file's group 
  number and user number are the same number.
      Does this mean procmail is running with the wrong effective GID, 
  or am missing something?
      Because of this problem, I've installed procmail-3.11pre4 
  which doesn't have this problem and which seems to run fine.

Try procmail 3.11pre7.  Also, make sure that procmail is indeed setgid
correctly.  I.e. simply mimicking the permissions from the 3.11pre4 procmail
exactly should be more than enough.
-- 
Sincerely,                                                          
srb(_at_)cuci(_dot_)nl
           Stephen R. van den Berg (AKA BuGless).

WARNING: Do not look into laser with remaining eye

<Prev in Thread] Current Thread [Next in Thread>