procmail
[Top] [All Lists]

Re: Disabling pipe execution

2003-01-07 17:12:36
On Tue, Jan 07, 2003 at 06:36:39PM -0500, Derek Simkowiak wrote:
if they have root permissions). You might try messing with the SHELL
variable as a workaround, but I don't know of a way for administrators
to prevent users from resetting it back to /bin/sh (or other).

      Thanks for the feedback.  The filesharing will be done via WebDAV,
not FTP.  Hiding the .procmailrcs in a non-shared dir is something I had
thought of, but I'd really like to just provide the file for them to edit
with a text editor (in addition to the web interface).

/usr/local/etc/procmailrcs is a special directory to procmail (see the
procmail manpage) wherein procmail will assume the uid of the file it
is reading under certain conditions.

      I will look at the SHELL variable as you suggest.  Hrmm... the
users are auth'd via P.A.M. (Pluggable Authentication Modules).  Perhaps
there is some setting in PAM that restricts shells or execution... I will
look into that as well.

That's probably your best bet: fix it at the system level (i.e., take
away all the shells and replace them with dummies or nologins or
something).

Scott
-- 
Scott Wiersdorf
scott(_at_)perlcode(_dot_)org

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>