Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

[Peter Haworth]

Pavel Kankovsky wrote:
> On Wed, 26 Jan 2000, Russell Nelson wrote:
> 
> >  > 2. qmail-send is run as root?
> > 
> > Yup.  Well, qmail-start is run as root.  Along the line it gives up
> > its rootness, becoming qmail-send, and leaving only qmail-lspawn
> > running as root.
> 
> Login is run as root. It switches to my privs and execs my login
> shell. Therefore my login shell is run as root. Right? :)

Login is run as root.
Once you've entered a correct username/password pair, it switches to that user,
so it isn't running as root any more.
Your login shell runs as your user.

It wouldn't make sense otherwise.

Maybe this was a troll after all...

-- 
        Peter Haworth   [EMAIL PROTECTED]
"I have yet to see any problem, however complicated, which, when you
 looked at it the right way, did not become still more complicated."
                -- Poul Anderson