On Tue, Sep 30, 2003 at 03:50:31PM -0600, Jay Eno wrote: > I'm running the qmail-toaster package(s). It has a separate RPM for > Maildrop, > which includes the reformime. Apparently the whole package defaults to be > suid/sgid as root/qmail. So this was causing the problem when the scanner > script called reformime to parse it out for clamav. It would set all the > output root/qmail with 0600 perms, even though the directory structure would > be qscand/qscand.
Then you have installed a BROKEN Maildrop package! If the author of Maildrop heard about this - he's probably go ape-sh*t. Seriously, reformime is NOT MEANT TO BE SETUID ANYTHING!!! I run maildrop out of an official RPM, and it's NOT setuid - in fact it's owned by "bin" - not "root"! > > Removing the suid/sgid bits on the reformime binary resolved my permissions > problem. Took me forever to figure that out, and I'm surprised nobody on > this list has run into this before. It would appear that all the maildrop > source defaults to root/mail even when you compile it unless you explicitly Probably no-one else is running what you're running. It sounds really broken... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
