Dek, my apologies for having been a little irritable.

Quoting likot ([EMAIL PROTECTED]):

> in context, i was refering to security design 
> having 14 exploits in 1996-1997 and 2(?!?) not so
> recent ones says something about the security design
> in sendmail. 

As noted previously, all of these occurred while Sendmail was _not only_ 
a single monolithic binary, but also one that retained root privilege
for all code regardless of what role the particular Sendmail instance
served.  This fundamental weakness in the design was corrected.

Now, there may very well have been other fundamental design corrections:
I wouldn't know, because I no longer run Sendmail, and prefer to never
run it again.  (Accordingly, my interest in the subject is limited.)
But I know enough about the subject to see the fallacy of citing history
that's no longer particularly relevant for easily understandable
reasons.

> oh i was referring to qmail-queue fix (queue-fix) and qmail-queue
> repair ( queue-repair ) at www.qmail.org

OK, then.  Good!  Quoting http://www.qmail.org/top.html:  "Eric Huss has
released queue-fix 1.4. It repairs or generates a qmail queue structure.
You can use this to help move your queue location, or if you regenerate
the file system and the inode numbering changes. It will also fix
permissions and ownerships of the files."  From the tarball's README:

   This is a small utility for checking and repairing the qmail queue
   structure.  It will fix uid/gid settings and permissions.  It will
   rename the message files to match their inodes.  It will even create
   directories and files that don't exist that should be there (you can
   even create a queue from scratch).

Excellent!  Will correct my "muas" file.

queue-repair is here:
http://www.qcc.sk.ca/~charlesc/software/queue_repair/  The docs are a
bit more vague, but the --repair switch does this:  "Run in repair mode.
queue-repair will attempt to correct all problems that it finds, except
if the basic queue directories (queue, queue/mess, queue/info, etc) are
not found."  (The --create switch is similar, except it builds new 
queue directories if necessary.)

The "BLURB" file in the tarball is more explicit:

   Handles basic tasks like fixing a queue restored from backups,
   incorrect ownership or permissions of directories and files, 
   missing or extra split subdirectories, unexpected files or other 
   direntries, or creating a valid queue from scratch.

Sounds like another winner.  I'll be noting both of these in my
informational file, right away.

> oh then thats your problem....

Let's please not gratuitously personalise a technical discussion.

> but this was not for you, ( and that's a good thing cause i know you
> know more ) this is to inform those people who will read your post,
> for your information there was a post in this list saying  you can't
> modify qmail.

OK.  I didn't notice that, or I would have corrected it.

> i agree on this, no explanation needed, but im being positive and
> hopefully things will change in the future.

Good point.  qmail is a very worthwhile technical achievement (whether I
personally like it or not), and I really would hate to see it die for
lack of a permissions grant, e.g., when Dan eventually stops writing
software or (long from now, one hopes) dies.

-- 
Cheers,                                      "Reality is not optional."
Rick Moen                                             -- Thomas Sowell
[EMAIL PROTECTED]
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to