Mike Austin <mga(_at_)zoo(_dot_)uvm(_dot_)edu> writes:
That's part of the patch I mentioned from:
http://mirror.ncsa.uiuc.edu/procmail/patches/smrsh-like.patch
Unfortunately, it's based on a really old version of procmail. It didn't
patch cleanly to procmail 3.22. Is it worth the effort to try to merge
the patch with 3.22? Has anyone else done this already?
Or has anyone just changed BinSH's definition from /bin/sh to /bin/smrsh
in config.h?
Changing the definition of BinSh would not help you restrict what
an rcfile can execute. When it can, procmail will directly invoke
programs without using the shell. There's also nothing to stop a user
from setting SHELL to a 'normal' value.
If you need to restrict what an rcfile can execute, you'll need to merge
that patch in.
Philip Guenther
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail