On Thu, 2003-12-18 at 16:00, Stephen Bosch wrote: > I should probably point out that this machine is running RH9, but > reformime is not suid root, and the perl is 5.8.2 installed from sources > with suid support compiled in. > > It passes all the tests.
Well it's not running setuid. That fact that all the files are owned by qscand except for quaratine-attachments* - which are owned by root implies it isn't. Try running "qmail-scanner-queue.pl -g" as your own non-root account - I think you'll get "access denied" there too. Check the perms on suidperl - it should be 4711 or thereabouts. (basically o+s). As far as passing the tests go - that's actually pretty hard to do right. As you run the install as root, most things "just work", and changing down to other usernames to test things gets difficult due to ./configure having to support *all* Unixes - not just Redhat :-( Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general