Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

[Pavel Kankovsky]

On Wed, 26 Jan 2000, Russell Nelson wrote:

>  > 2. qmail-send is run as root?
> 
> Yup.  Well, qmail-start is run as root.  Along the line it gives up
> its rootness, becoming qmail-send, and leaving only qmail-lspawn
> running as root.

Login is run as root. It switches to my privs and execs my login
shell. Therefore my login shell is run as root. Right? :)

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."