procmail
[Top] [All Lists]

Re: procmail - a condition .. LOOPING OOPS

2005-01-11 14:28:10
On Tue, Jan 11, 2005 at 06:28:31PM +0000, Andy wrote:

[Dallman Ross wrote:]
^^^^^^^^^^^^^^^^^^^^^^^ # this (which I just added, as I did the
last one, and hence the editor's brackets) is what I meant by
"attribution left off; not my signature, which I would appreciate
your not quoting as it adds nothing useful to the message archive
or communication.  The above attribution, however, is essential
to anyone viewing the archive later in order to know to whom you
were responding.

# you are mangling my text while
# quoting me (and also leaving
# off the attribution).  Please
# be careful about such!

Must be the webmail client or something else along the way
snipped the dollar, not me (or by accident - sorry).  Care will
be taken over attribution.

 :*>

Hmmm - yes ok.  However, when the mails get here they
have multiple addresses in that field so is this safe ?
It would seem safer to match the zz_plusz-axelrod- string
... if you know a way to do that and retain only the localuser
without sed or similar please give.

What I showed you wouldn't work there.  You'd probably need
recursion, which is not simple in procmail.  So maybe sed is
the better option there for now.

If it's not the users' own processes running procmail, then how can
messages be safely written to their spools?  If root is writing
to the spools (i.e., no $DROPPRIVS invoked), then root owns the
messages.  Either the users then can't delete them or, if they can,
then something owned by root is writeable by users, which is not
secure.

Unless I misunderstand the delivery after leaving procmail in the
code I mailed is with sendmail so this is not an issue, its just
like any local mailer maling another user.

Okay, that's right.  I had forgotten that you were using sendmail
to forward these.  Yes, that would more or less work.

attribution left below ;-). :).

Dallman

Not the best place for it at all.  :-( :-(
But I appreciate that you tried.

-- 
dman

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail