retitle 415577 suid nullmailer-queue doesn't change uid on filesystems mounted 
with nosuid
thanks

This isn't really appropriate as a nullmailer change, but I'll leave
the request open pending discussion.

I say that because nullmailer knows nothing about what uid it is running
as.  The uid change is performed by the libc6 loader due to the program
being suid.  However you have told it to ignore the setuid bit by mounting
that filesystem as nosuid.  So it's doing exactly what you instructed it !
I would be very reluctant indeed to add a setuid call to nullmailer as
it would introduce a potential security hole if I got it wrong.

What you should be doing is letting apt on your NFS server send its
emails using its own MTA, not that on the client's filesystem.  Perhaps,
instead of chrooting, using APT's own config feature to upgrade another
filesystem might be helpful, as in

  "apt-get -o Rootdir=/srv/nfs/client/whatever upgrade" ?

I think this should work, see man apt.conf for more information.  Try it
and see if it helps, anyway.

Nick



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to