At 10:31 AM 5/29/00 -0300, Richard Spencer wrote:
>Does this look OK permission-wise?
>
>[rks@localhost rks]$ ls -la /usr/bin/procmail
>-r-Sr-Sr-- 1 root mail 64468 Apr 6 1999 /usr/bin/procmail
No. Not unless you are using a Linux distribution that is quite different
from what I am used to. The upper-case Ss are wrong ad should be lower case,
as below:
-r-sr-sr-- 1 root mail 64468 Apr 6 1999 /usr/bin/procmail
In addition, as specified, only root and members of group mail can run
procmail (making the sgid bit pointless). On my systems, procmail is
installed as
-r-sr-sr-x 1 root mail 64468 Apr 6 1999 /usr/bin/procmail
Setting both the suid and sgid bits is always a potential security risk, but
it appears to be the conventional setting for procmail.
>
>I would imagine this should look similar:
>
>[rks@localhost rks]$ ls -la /etc/smrsh/procmail
>lrwxrwxrwx 1 root root 17 May 28 15:39 /etc/smrsh/procmail
-> /usr/bin/procmail
Nope, not at all. This is a symlink, and their permissions ALWAYS look the
way tis one does. SYmlinks don't really have permissions as such; they
derive their permissions from the permissions of the underlying, real file name.
------------------------------------"Never tell me the odds!"---
Ray Olszewski -- Han Solo
Palo Alto, CA [EMAIL PROTECTED]
----------------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs
