On Tue, Sep 30, 2003 at 03:50:31PM -0600, Jay Eno wrote:
> I'm running the qmail-toaster package(s). It has a separate RPM for
> Maildrop, 
> which includes the reformime. Apparently the whole package defaults to be 
> suid/sgid as root/qmail. So this was causing the problem when the scanner
> script called reformime to parse it out for clamav. It would set all the 
> output root/qmail with 0600 perms, even though the directory structure would
> be qscand/qscand.

Then you have installed a BROKEN Maildrop package! If the author of Maildrop
heard about this - he's probably go ape-sh*t. Seriously, reformime is NOT
MEANT TO BE SETUID ANYTHING!!!

I run maildrop out of an official RPM, and it's NOT setuid - in fact it's
owned by "bin" - not "root"!

> 
> Removing the suid/sgid bits on the reformime binary resolved my permissions
> problem. Took me forever to figure that out, and I'm surprised nobody on 
> this list has run into this before. It would appear that all the maildrop 
> source defaults to root/mail even when you compile it unless you explicitly

Probably no-one else is running what you're running. It sounds really
broken...

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to