Re: Exim permissions

2002-12-11 Thread Clive Standbridge
On Wed 11 Dec 2002 02:54:02 +(+1100), Rob Weir wrote: On Mon, Dec 02, 2002 at 06:31:56AM +, Pigeon wrote: On Sun, Dec 01, 2002 at 09:49:52PM +, Clive Standbridge wrote: I have not heard that sudo is inherently insecure in any specific way (but I'm not a long time sudo user).

Re: Exim permissions

2002-12-11 Thread Pigeon
On Wed, Dec 11, 2002 at 02:11:59PM +, Clive Standbridge wrote: On Wed 11 Dec 2002 02:54:02 +(+1100), Rob Weir wrote: On Mon, Dec 02, 2002 at 06:31:56AM +, Pigeon wrote: On Sun, Dec 01, 2002 at 09:49:52PM +, Clive Standbridge wrote: I have not heard that sudo is inherently

Re: Exim permissions

2002-12-11 Thread Rob Weir
On Wed, Dec 11, 2002 at 02:11:59PM +, Clive Standbridge wrote: On Wed 11 Dec 2002 02:54:02 +(+1100), Rob Weir wrote: On Mon, Dec 02, 2002 at 06:31:56AM +, Pigeon wrote: On Sun, Dec 01, 2002 at 09:49:52PM +, Clive Standbridge wrote: I have not heard that sudo is inherently

Re: Exim permissions

2002-12-10 Thread Rob Weir
On Sat, Nov 30, 2002 at 10:28:24PM +, Pigeon wrote: Is there a time delay involved? No specific delay, should be on the order of seconds. -rob msg18323/pgp0.pgp Description: PGP signature

Re: Exim permissions

2002-12-10 Thread Rob Weir
On Mon, Dec 02, 2002 at 06:31:56AM +, Pigeon wrote: On Sun, Dec 01, 2002 at 09:49:52PM +, Clive Standbridge wrote: I have not heard that sudo is inherently insecure in any specific way (but I'm not a long time sudo user). I think it's a complexity issue. The sudo binary is about

Re: Exim permissions

2002-12-02 Thread Pigeon
On Sun, Dec 01, 2002 at 09:49:52PM +, Clive Standbridge wrote: On Sat 30 Nov 2002 17:14:09 +(+), Pigeon wrote: I've been writing a C program to burst incoming digests into separate messages. Did you know that procmail can regurgitate digested mail? From the procmailex man

Re: Exim permissions

2002-12-01 Thread Derrick 'dman' Hudson
On Sat, Nov 30, 2002 at 04:36:42PM -0600, Shyamal Prasad wrote: | jah == jah pigeon Pigeon writes: | | jah BUT... /usr/sbin/exim is setuid root. Huh? | | Exim probably uses the root permission for very, very few things (like | opening port 25 when in daemon mode). It probably drops the

Re: Exim permissions

2002-12-01 Thread Shyamal Prasad
Pigeon == jah pigeon Pigeon writes: Better still, use sudo and you will not have to do any C programming :-) Pigeon Even for your set real u/gid trick? - given that there's Pigeon no setgid(1), and setuid(1) doesn't let you set the gid as Pigeon well? And it can manage

Re: Exim permissions

2002-12-01 Thread Pigeon
On Sun, Dec 01, 2002 at 12:18:23PM -0500, Derrick 'dman' Hudson wrote: On Sat, Nov 30, 2002 at 04:36:42PM -0600, Shyamal Prasad wrote: | jah == jah pigeon Pigeon writes: | | jah BUT... /usr/sbin/exim is setuid root. Huh? | | Exim probably uses the root permission for very, very few

Re: Exim permissions

2002-12-01 Thread Clive Standbridge
On Sat 30 Nov 2002 17:14:09 +(+), Pigeon wrote: I've been writing a C program to burst incoming digests into separate messages. Did you know that procmail can regurgitate digested mail? From the procmailex man page: Split up incoming digests from the surfing mailing list

Re: Exim permissions

2002-12-01 Thread Derrick 'dman' Hudson
On Sun, Dec 01, 2002 at 10:02:56PM +, Pigeon wrote: | OK, but I still don't quite understand why the trusted user bit | doesn't work. Oh, yeah, I forgot to mention that part. The short answer is trusted_user doesn't mean what you think it means. See section 5.2 of the spec for a longer

Re: Exim permissions

2002-12-01 Thread Vineet Kumar
* Derrick 'dman' Hudson ([EMAIL PROTECTED]) [021201 17:00]: On Sun, Dec 01, 2002 at 10:02:56PM +, Pigeon wrote: | OK, but I still don't quite understand why the trusted user bit | doesn't work. Oh, yeah, I forgot to mention that part. The short answer is trusted_user doesn't mean

Exim permissions

2002-11-30 Thread Pigeon
Hi, Could someone explain to me the weirdness of exim permissions? To force delivery of email to remote addresses, it seems that I have to pon and then exim -qf. For exim -qf, I have to be root. I'd rather not have to. BUT... /usr/sbin/exim is setuid root. Huh? So I wrote a little

Re: Exim permissions

2002-11-30 Thread John Hasler
Pigeon writes: To force delivery of email to remote addresses, it seems that I have to pon and then exim -qf. For exim -qf, I have to be root. I'd rather not have to. You shouldn't have to. Exim should have installed /etc/ppp/ip-up.d/exim, containing: #!/bin/sh # Flush exim queue if [ -x

Re: Exim permissions

2002-11-30 Thread Shyamal Prasad
jah == jah pigeon Pigeon writes: jah BUT... /usr/sbin/exim is setuid root. Huh? Exim probably uses the root permission for very, very few things (like opening port 25 when in daemon mode). It probably drops the root permission as one of the first things it ever does. jah So I wrote

Re: Exim permissions

2002-11-30 Thread Pigeon
Re time delay: I've just given it over 15 minutes to see what would happen, and it didn't flush its queue, and doing ps ax every so often has revealed no trace of exim or any other mail programs running. Pigeon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe.

Re: Exim permissions

2002-11-30 Thread Pigeon
On Sat, Nov 30, 2002 at 12:57:39PM -0600, John Hasler wrote: Pigeon writes: To force delivery of email to remote addresses, it seems that I have to pon and then exim -qf. For exim -qf, I have to be root. I'd rather not have to. You shouldn't have to. Exim should have installed

Re: Exim permissions

2002-11-30 Thread Carel Fellinger
On Sat, Nov 30, 2002 at 11:14:04PM +, Pigeon wrote: Re time delay: I've just given it over 15 minutes to see what would happen, and it didn't flush its queue, and doing ps ax every so often has revealed no trace of exim or any other mail programs running. Not shure you have a real problem,

Re: Exim permissions

2002-11-30 Thread Pigeon
On Sat, Nov 30, 2002 at 04:36:42PM -0600, Shyamal Prasad wrote: I have not read the exim source, but do try setting your real user/group identities to the mail user/group (=8 on Debian) before the system call. (man setuid, man setgid) It might work out. Hey man, you rock! That works. I