On Wed, Feb 23, 2000 at 04:23:33PM -0500, ari wrote:
> Is there any particular reason that qmail-inject uses env_get("*USER") instead
> of getuid and getpwuid (or just cuserid)?
>
> If anyone is familiar with qualcomm qpopper (2.53, at least), using POP-send
> changes the UID to the proper user and the GID to mail, but leaves the
> environment as root's. Under sendmail this is not a problem, but since
> qmail-inject uses the environment alone, all messages end up with a return-path
> of root.
>
> If no one has a good reason that i should leave it alone, please let me know.
When will you be able to inject mail via the POP protocol?
qmail-inject is only used for local injection.
You can do the exact same thing on the command line:
/var/qmail/bin/qmail-inject -f root
What is the security problem here?
http://www.nrg4u.com/qmail/the-big-qmail-picture-103-p1.gif
/magnus
--
http://x42.com/
