You'll get no argument from me that it's broken! (: It's broken in the Qmail-Toaster package though.
The spec for the Toaster RPM has:
%{_datadir}/maildrop
%attr(6555, root, qmail) %{_bindir}/*
So anybody that uses Qmail-Toaster is likely to have this problem. A Slightly smaller playing field.
I'm not sure what their reasoning is for making all of Maildrop SUID. I did notice in searching that this used to be common in a SD port of Maildrop though. Time to fire off an email and see what they have to say for themselves.
-= Jay =-
-----Original Message-----
From: Jason Haar [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 30, 2003 4:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [Qmail-scanner-general]Permissions [Solved]
On Tue, Sep 30, 2003 at 03:50:31PM -0600, Jay Eno wrote:
> I'm running the qmail-toaster package(s). It has a separate RPM for
> Maildrop, which includes the reformime. Apparently the whole package
> defaults to be suid/sgid as root/qmail. So this was causing the
> problem when the scanner script called reformime to parse it out for
> clamav. It would set all the output root/qmail with 0600 perms, even
> though the directory structure would be qscand/qscand.
Then you have installed a BROKEN Maildrop package! If the author of Maildrop heard about this - he's probably go ape-sh*t. Seriously, reformime is NOT MEANT TO BE SETUID ANYTHING!!!
I run maildrop out of an official RPM, and it's NOT setuid - in fact it's owned by "bin" - not "root"!
>
> Removing the suid/sgid bits on the reformime binary resolved my
> permissions problem. Took me forever to figure that out, and I'm
> surprised nobody on this list has run into this before. It would
> appear that all the maildrop source defaults to root/mail even when
> you compile it unless you explicitly
Probably no-one else is running what you're running. It sounds really broken...
--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf _______________________________________________
Qmail-scanner-general mailing list [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
