On Thu, Apr 15, 1999 at 10:55:15AM +0200, Joel Eriksson wrote:
> On Wed, Apr 14, 1999 at 02:49:08PM -0400, xs wrote:
> >
> > also may i note that i saw a problem similar to this before:
> > say you give a user pop3 only access, and the ability to change their
> > .qmail file. you're still ownable, don't forget about any setid programs
> > you may have clogging up your harddrive. or worse.
>
> That's why I modified qmail-local.c so that only users listed in
> /var/qmail/control/staffusers are able to do filedelivery or execute
> programs from their .qmail-files.
Hmm mind sharing that patch? I'd suppose Russell would happily put it on
www.qmail.org
Greetz, Peter
--
| 'He broke my heart, | Peter van Dijk |
I broke his neck' | [EMAIL PROTECTED] |
nognixz - As the sun | Hardbeat@ircnet - #cistron/#linux.nl |
| Hardbeat@undernet - #groningen/#kinkfm/#vdh |
