On Mon, 8 Jan 2007, Josip Rodin wrote:

Well, the solution to this is to have esmtp run that command either
as the user root, daemon or mail (the trusted users), or not use -d.
Can you do either of this?

I can't do either of those. I can't make esmtp run the command as root, because it itself is not setuid, and sendmail is just an alias for esmtp. I If I don't use -d to maildrop, then maildrop thinks it's delivering to root, and so just fork-bombs.

If we made all users trusted, you would have a potentially unsafe setuid
binary that can be run and poked at by everyone.

Right, but that's my fault for making it setuid; by default it isn't setuid.

The problem here seems to be that esmtp has no daemon running as root, and the way you're expecting me to use it requires some part of the MDA to be root, unless I misunderstand.

--
http://rrt.sc3d.org/
Extreme programming: burn your bridges when you come to them


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to