Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-09 Thread Stefan Hornburg
Reuben Thomas wrote: On Tue, 9 Jan 2007, Josip Rodin wrote: And then someone files a bug saying they made it setuid but now it's completely open to the world... what do I do then? :) This is the way that procmail works, and it's hardly open to the world, it's just more susceptible to bugs.

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-09 Thread Josip Rodin
On Tue, Jan 09, 2007 at 12:59:35AM +, Reuben Thomas wrote: And then someone files a bug saying they made it setuid but now it's completely open to the world... what do I do then? :) This is the way that procmail works, and it's hardly open to the world, it's just more susceptible to

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-09 Thread Reuben Thomas
On Tue, 9 Jan 2007, Stefan Hornburg wrote: Just my two cents: sending email to the root account (physically) instead using an alias is unnecessary and therefore deprecated by the standard MTA on Debian. Yes, I guess this is a weakness of esmtp (i.e. presumably you're not saying that you

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-09 Thread Reuben Thomas
On Tue, 9 Jan 2007, Josip Rodin wrote: It's actually a bit fuzzy to me. Why should any user be able to do deliver e-mail to another user using only the MDA? A really simple reason against it is when the other user uses a MTA-side-mechanism to redirect their mail elsewhere (~user/.forward?),

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-09 Thread Stefan Hornburg (Racke)
Reuben Thomas wrote: On Tue, 9 Jan 2007, Stefan Hornburg wrote: Just my two cents: sending email to the root account (physically) instead using an alias is unnecessary and therefore deprecated by the standard MTA on Debian. Yes, I guess this is a weakness of esmtp (i.e. presumably you're

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-09 Thread Reuben Thomas
On Tue, 9 Jan 2007, Stefan Hornburg (Racke) wrote: Yes, there is no issue with sending to root, but it should be aliased to a regular user or an email account outside the host. I'll file a wishlist bug against esmtp :) ssmtp aliases root in particular, and other users in general if you want,

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Reuben Thomas
On Mon, 8 Jan 2007, Josip Rodin wrote: [Note to self: always re-read what you wrote originally.] Sorry, I've confused the issue by mis-restating it. My problem is with sending mail *to* root, not *from* root. What exactly happens in your case? What is the exact error message? This is the

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Josip Rodin
On Mon, Jan 08, 2007 at 06:35:45PM +, Reuben Thomas wrote: What exactly happens in your case? What is the exact error message? This is the case that I was hoping should work: $ sudo chmod u+s /usr/bin/maildrop $ ls -l /usr/bin/maildrop -rwsr-sr-x 1 root mail 162132 2006-10-08 23:11

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Reuben Thomas
On Mon, 8 Jan 2007, Josip Rodin wrote: Well, the solution to this is to have esmtp run that command either as the user root, daemon or mail (the trusted users), or not use -d. Can you do either of this? I can't do either of those. I can't make esmtp run the command as root, because it itself

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Josip Rodin
On Mon, Jan 08, 2007 at 07:43:41PM +, Reuben Thomas wrote: Well, the solution to this is to have esmtp run that command either as the user root, daemon or mail (the trusted users), or not use -d. Can you do either of this? I can't do either of those. I can't make esmtp run the command as

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Reuben Thomas
On Mon, 8 Jan 2007, Josip Rodin wrote: Restricting -d to trusted users has been the default for as long as I can remember. Tracking back old versions, I can confirm that it's been done since at least six years ago. It's a pretty sane default and changing it would be a mistake IMHO. I agree

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Josip Rodin
On Tue, Jan 09, 2007 at 12:27:58AM +, Reuben Thomas wrote: I agree that use with esmtp is a minority case. The one reason I think changing this default might be reasonable is precisely because maildrop is not shipped setuid root in Debian, so its behaviour when setuid root could arguably

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-08 Thread Reuben Thomas
On Tue, 9 Jan 2007, Josip Rodin wrote: And then someone files a bug saying they made it setuid but now it's completely open to the world... what do I do then? :) This is the way that procmail works, and it's hardly open to the world, it's just more susceptible to bugs. (Any suggestion

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-07 Thread Reuben Thomas
On Sun, 7 Jan 2007, Josip Rodin wrote: There you go. Unless you quote the argument to to, it is evaluated. !rrt means 'not string', and that means 0. That's why maildrop said that it delivered to 0. Thanks. However, this only cures the side note about mail seemingly disappearing altogether,

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-07 Thread Josip Rodin
On Sun, Jan 07, 2007 at 07:43:17PM +, Reuben Thomas wrote: There you go. Unless you quote the argument to to, it is evaluated. !rrt means 'not string', and that means 0. That's why maildrop said that it delivered to 0. Thanks. However, this only cures the side note about mail seemingly

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-07 Thread Reuben Thomas
On Sun, 7 Jan 2007, Josip Rodin wrote: Well, it should work if esmtp runs it as one of the so-called trusted users. The compiled-in default includes: root mail daemon. What does esmtp run it as? esmtp runs it as whatever user it is run as. In this case, the problem occurs when I run esmtp as

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-07 Thread Josip Rodin
On Sun, Jan 07, 2007 at 11:59:29PM +, Reuben Thomas wrote: Well, it should work if esmtp runs it as one of the so-called trusted users. The compiled-in default includes: root mail daemon. What does esmtp run it as? esmtp runs it as whatever user it is run as. In this case, the problem

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-06 Thread Josip Rodin
On Sat, Jan 06, 2007 at 01:44:19AM +, Reuben Thomas wrote: Can you run this trivial test: echo foo /tmp/foo su -c 'maildrop -V2 /tmp/foo' And paste the output? maildrop: Changing to /root Message start at 0 bytes, envelope sender=root maildrop: Attempting .mailfilter maildrop:

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-06 Thread Reuben Thomas
On Sat, 6 Jan 2007, Josip Rodin wrote: Uhh. cat /root/.mailfilter ? to !rrt (rrt is the name of my normal user) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-06 Thread Josip Rodin
On Sat, Jan 06, 2007 at 08:04:16PM +, Reuben Thomas wrote: On Sat, 6 Jan 2007, Josip Rodin wrote: Uhh. cat /root/.mailfilter ? to !rrt (rrt is the name of my normal user) There you go. Unless you quote the argument to to, it is evaluated. !rrt means 'not string', and that means 0.

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-05 Thread Josip Rodin
On Fri, Jan 05, 2007 at 12:40:11AM +, Reuben Thomas wrote: BTW, it should deliver to /var/mail/root, or whatever you used in /etc/maildroprc as the default $DEFAULT. It doesn't? I have nothing configured in /etc/maildroprc. Should I? Again, I just left it alone when I installed it. No,

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-05 Thread Reuben Thomas
On Fri, 5 Jan 2007, Josip Rodin wrote: Can you run this trivial test: echo foo /tmp/foo su -c 'maildrop -V2 /tmp/foo' And paste the output? maildrop: Changing to /root Message start at 0 bytes, envelope sender=root maildrop: Attempting .mailfilter maildrop: Delivering to 0 -- To

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-04 Thread Reuben Thomas
Package: maildrop Version: 2.0.2-11 Severity: normal I was using maildrop as the MDA with esmtp-run. In this configuration it's set up to run as /usr/bin/maildrop -d %T, and %T is the local part of the address. This fails when I try to send mail to root, complaining that it can't change user,

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-04 Thread Josip Rodin
On Thu, Jan 04, 2007 at 06:45:59PM +, Reuben Thomas wrote: Package: maildrop Version: 2.0.2-11 Severity: normal I was using maildrop as the MDA with esmtp-run. In this configuration it's set up to run as /usr/bin/maildrop -d %T, and %T is the local part of the address. This fails

Bug#405584: Without setuid, I can't use maildrop with esmtp

2007-01-04 Thread Josip Rodin
On Thu, Jan 04, 2007 at 06:45:59PM +, Reuben Thomas wrote: If I drop the -d %T in esmtp's configuration, then mail from root (whether to root or another user) goes AWOL with no messages and no record that I can discover BTW, it should deliver to /var/mail/root, or whatever you used in