Re: MTAs

2001-11-21 Thread Juha Jäykkä
On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should well this is not a problem. (x)inet works by using stdin/stdout rather than network ports. This is why you have to tell whatever service you are

Re: MTAs

2001-11-21 Thread Mark Janssen
On Wed, Nov 21, 2001 at 12:56:53PM +0200, Juha J?ykk? wrote: On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should bit from exim. Now my original question was: does it (exim) still need to be suid root? And

Re: MTAs

2001-11-21 Thread Paul Haesler
mail's priviledges so giving mail access to any necessary directories is enough for exim to function - unless there are issues with the permissions of /var/spool/mail/insert your favourite username here. Now another question: are there? As long as /var/spool/mail/* is writable/owned by

Debian packages signed?

2001-11-21 Thread Javier Fernández-Sanguino Peña
I had recently a discussion regarding Debian package signing and automaticly downloading checking packages signatures (i.e. using debsig-verify) However, I see now that the default /etc/dpkg/dpkg.conf ships with no-debsig by default and users are not currently (correct me if it does) checking

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Sebastian Rittau
On Wed, Nov 21, 2001 at 12:47:49AM -0600, Bryan Andersen wrote: On thing I think is quite important is to get rid of calls to routines that it is possible to buffer overflow. OpenBSD has a feature in their version of gcc that will cause a compile time error message telling you when one

Mail-server config

2001-11-21 Thread Johannes Weiss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to make 800 UNIX-users for a mailserver and if not what's the best

Re: Mail-server config

2001-11-21 Thread Rolf Kutz
Johannes Weiss ([EMAIL PROTECTED]) wrote: Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to make 800 UNIX-users for a mailserver and if not what's the best

Re: Mail-server config

2001-11-21 Thread Justin R. Miller
Thus spake Johannes Weiss ([EMAIL PROTECTED]): I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to make 800 UNIX-users for a mailserver and if not what's the best solution

Re: MTAs

2001-11-21 Thread Karl E. Jorgensen
On Wed, Nov 21, 2001 at 10:45:24PM +1000, Paul Haesler wrote: snip . Cc: [paul@marge sbin] 2001-11-21 22:41:42 166Vl8-00017q-00 = [EMAIL PROTECTED] U=paul P=local S=327 2001-11-21 22:41:42 166Vl8-00017q-00 Unable to get root to set uid and gid for local delivery to paul: uid=1000

Re: Mail-server config

2001-11-21 Thread Sami Juvonen
On Wed, Nov 21, 2001 at 10:51:57AM -0500, Justin R. Miller wrote: Thus spake Johannes Weiss ([EMAIL PROTECTED]): I plan to install a mailserver for ca. 800 users, now I planned to Have a look at Cyrus IMAP. It's designed for POP3/IMAP for non-shell users, i.e. a closed-box system. the

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Andrew Suffield
On Wed, Nov 21, 2001 at 08:29:09AM +0100, Sebastian Rittau wrote: I hope strcpy() does not belong to this class. It's quite common to do something like this: int len = strlen(s); char *new = (char *) malloc(len + 1); strcpy(new, s); This is perfectly fine. Albeit silly; you mean

Re: Mail-server config

2001-11-21 Thread Petro
On Wed, Nov 21, 2001 at 04:34:46PM +0100, Johannes Weiss wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Alan Shutko
Andrew Suffield [EMAIL PROTECTED] writes: Albeit silly; you mean strdup() Unless you're restricted to C89. -- Alan Shutko [EMAIL PROTECTED] - In a variety of flavors! Style may not be the answer, but at least it's a workable alternative. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with

Re: Mutt tmp files

2001-11-21 Thread Matthew Sackman
On Thu, Nov 15, 2001 at 07:41:35PM +, sober wrote: if it's to unsecure u have 2 ways: - choose another emailprogramm where u don't know the risk that root can read the mails - write them direct on ur smtp server ... btw: root of ur mailserver can read ur incoming mails too ! // jens

Re: Mail-server config

2001-11-21 Thread Jaroslaw Podstawa
On Wed, Nov 21, 2001 at 09:56:28AM -0800, Sami Juvonen wrote: On Wed, Nov 21, 2001 at 10:51:57AM -0500, Justin R. Miller wrote: Thus spake Johannes Weiss ([EMAIL PROTECTED]): I plan to install a mailserver for ca. 800 users, now I planned to Have a look at Cyrus IMAP. It's designed

Re: Mail-server config

2001-11-21 Thread Joerg Jaspert
[EMAIL PROTECTED] (Sami Juvonen) writes: Also note that the Debian packages for Cyrus are old, from a branch that is not being developed any more. I think your best bet is to download the source and compile your own. That's what I'm doing for a family-and-friends mailserver. I might come

Passwd and mysql

2001-11-21 Thread Robert Magier
Hello. Is there any possibility to force passwd command to change password in mysql datbase instead shadow file ? Do I have to do smth with pam ? -- Robert Magier -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

LPRNG vulnerability [was Re: weird messages in syslog]

2001-11-21 Thread Jim McCloskey
SaDIKuZboy [EMAIL PROTECTED] | it could be something as a backdoor or an arbitrary service ... try | to : cron -l it shows u a table with binary called to be run, | report it and let's see what's there :o) Thanks for your help. Maybe you meant crontab -l? But I'm pretty certain in any case

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-21 Thread Petro
On Tue, Nov 20, 2001 at 08:25:36PM -0800, Nathan E Norman wrote: On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: On Mon, 19 Nov 2001 21:57:05 -0600 Nathan E Norman Nathan wrote: On Mon, Nov 19, 2001 at 03:26:50PM -0800, Petro wrote: But his is hugely off topic, and I'll

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Bryan Andersen
John Galt wrote: On Wed, 21 Nov 2001, Guillaume Morin wrote: Dans un message du 20 nov à 23:33, Anders Gjære écrivait : in gzip.c the line: strcpy(nbuf,dir); should maybe be replaced with: strncpy(nbuf, dir,sizeof(nbuf)); gzip runs with user privileges, therefore

Re: In Praise of Dos (RE: Mutt tmp files)

2001-11-21 Thread J C Lawrence
On Tue, 20 Nov 2001 22:25:36 -0600 Nathan E Norman Nathan wrote: On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: Mail-Followup-To is a non-standard, un-RFC documented, generally unsupported header. The guy is using mutt. mutt supports M-F-T. You figure it out. Which

La NewsLetter d'AALWAY Software

2001-11-21 Thread Tarik Tabani
AALWAY, TOUT LE LOGICIEL POUR LA COMMUNAUTE DU NET LA LETTRE D'INFO du 21 novembre 2001 http://www.aalway.net/index_assur201101.php Bonjour, * 30% de remise sur tous nos

Re: MTAs

2001-11-21 Thread Juha Jäykkä
On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should well this is not a problem. (x)inet works by using stdin/stdout rather than network ports. This is why you have to tell whatever service you are

Re: MTAs

2001-11-21 Thread Mark Janssen
On Wed, Nov 21, 2001 at 12:56:53PM +0200, Juha J?ykk? wrote: On the other hand, if exim is run from inetd (as I do), does it still need to be suid root? Since inetd runs root anyway, there should bit from exim. Now my original question was: does it (exim) still need to be suid root? And

Re: MTAs

2001-11-21 Thread Paul Haesler
mail's priviledges so giving mail access to any necessary directories is enough for exim to function - unless there are issues with the permissions of /var/spool/mail/insert your favourite username here. Now another question: are there? As long as /var/spool/mail/* is writable/owned by

Debian packages signed?

2001-11-21 Thread Javier Fernández-Sanguino Peña
I had recently a discussion regarding Debian package signing and automaticly downloading checking packages signatures (i.e. using debsig-verify) However, I see now that the default /etc/dpkg/dpkg.conf ships with no-debsig by default and users are not currently (correct me if it does) checking

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Sebastian Rittau
On Wed, Nov 21, 2001 at 12:47:49AM -0600, Bryan Andersen wrote: On thing I think is quite important is to get rid of calls to routines that it is possible to buffer overflow. OpenBSD has a feature in their version of gcc that will cause a compile time error message telling you when one of

Mail-server config

2001-11-21 Thread Johannes Weiss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to make 800 UNIX-users for a mailserver and if not what's the best

Re: Mail-server config

2001-11-21 Thread Rolf Kutz
Johannes Weiss ([EMAIL PROTECTED]) wrote: Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to make 800 UNIX-users for a mailserver and if not what's the best

Re: Mail-server config

2001-11-21 Thread Justin R. Miller
Thus spake Johannes Weiss ([EMAIL PROTECTED]): I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to make 800 UNIX-users for a mailserver and if not what's the best solution

Re: MTAs

2001-11-21 Thread Karl E. Jorgensen
On Wed, Nov 21, 2001 at 10:45:24PM +1000, Paul Haesler wrote: snip . Cc: [EMAIL PROTECTED] sbin] 2001-11-21 22:41:42 166Vl8-00017q-00 = [EMAIL PROTECTED] U=paul P=local S=327 2001-11-21 22:41:42 166Vl8-00017q-00 Unable to get root to set uid and gid for local delivery to paul: uid=1000

Re: Mail-server config

2001-11-21 Thread Sami Juvonen
On Wed, Nov 21, 2001 at 10:51:57AM -0500, Justin R. Miller wrote: Thus spake Johannes Weiss ([EMAIL PROTECTED]): I plan to install a mailserver for ca. 800 users, now I planned to Have a look at Cyrus IMAP. It's designed for POP3/IMAP for non-shell users, i.e. a closed-box system. the

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Andrew Suffield
On Wed, Nov 21, 2001 at 08:29:09AM +0100, Sebastian Rittau wrote: I hope strcpy() does not belong to this class. It's quite common to do something like this: int len = strlen(s); char *new = (char *) malloc(len + 1); strcpy(new, s); This is perfectly fine. Albeit silly; you mean

LPRNG vulnerability [was Re: weird messages in syslog]

2001-11-21 Thread Jim McCloskey
SaDIKuZboy [EMAIL PROTECTED] | it could be something as a backdoor or an arbitrary service ... try | to : cron -l it shows u a table with binary called to be run, | report it and let's see what's there :o) Thanks for your help. Maybe you meant crontab -l? But I'm pretty certain in any case

Re: Mail-server config

2001-11-21 Thread Petro
On Wed, Nov 21, 2001 at 04:34:46PM +0100, Johannes Weiss wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi @all, I plan to install a mailserver for ca. 800 users, now I planned to make 800 users with shell /bin/bash, home /dev/nul,... So, I ask you ;)), if this is a good solution, to

Re: buffer overflow in /bin/gzip?

2001-11-21 Thread Alan Shutko
Andrew Suffield [EMAIL PROTECTED] writes: Albeit silly; you mean strdup() Unless you're restricted to C89. -- Alan Shutko [EMAIL PROTECTED] - In a variety of flavors! Style may not be the answer, but at least it's a workable alternative.

Re: Mutt tmp files

2001-11-21 Thread Matthew Sackman
On Thu, Nov 15, 2001 at 07:41:35PM +, sober wrote: if it's to unsecure u have 2 ways: - choose another emailprogramm where u don't know the risk that root can read the mails - write them direct on ur smtp server ... btw: root of ur mailserver can read ur incoming mails too ! // jens

Re: Mail-server config

2001-11-21 Thread Joerg Jaspert
[EMAIL PROTECTED] (Sami Juvonen) writes: Also note that the Debian packages for Cyrus are old, from a branch that is not being developed any more. I think your best bet is to download the source and compile your own. That's what I'm doing for a family-and-friends mailserver. I might come up