Re: ifmail wont export

Pablo Saratxaga (srtxg@linux.chanae.stben.be)
Sun, 17 Aug 1997 15:28:34 +0200 (MET DST)

Kaixo !

> >so make ifnews owned by fnet.uucp and permissions rws--x--- and edit
> >/etc/group to make "news" a memeber of group uucp if that isn't already
> >the case :
> >uucp::14:uucp,fnet,news,root,mail
>
> There is no need to do that, if the permissions of ifmail/ifnews are:
> -rwsr-xr-- 2 ifmail news 106236 Aug 13 22:42 ifmail*

You mean -rwsr-xr-x (or -rws--x--x, that is execution by anybody).

Yes, that works but it is a big security hole, has anybody can tell execute
ifmail, that is anyone can do a "cat anyfile | ifmail -g c -o+ -r f1.n2.z6"
for exemple, forcing your system to do a long distance outgoing call, maybe
of a very big file.
In other words letting access to ifmail to anybody you are open to malicious
attacks. If you have no users on your machine that isn't very important, but
if you have you must make it only group executable

-- 

A bientôt, Pablo Saratxaga

~ ~ :wq ;-) PGP Key available, key ID: 0x8F0E4975