Gre7g Luterman wrote:
>
> How does a daemon running as user tofmipd access the file
> ~/.tmda/crypt_key?  The file has permissions 600, so it
> should not be accessible.  The daemon can't be doing a suid
> because it does not know the root password or the user's
> password (the authentication password in /etc/tofmipd is not
> the same as the user's password), so how is this
> accomplished?

If tmda-ofmipd is running setuid root, which is what happens in
a ``global'' setup, it forks right before piping the outgoing
message to tmda-inject (who actually sends the message).

The child process after the fork gets its UID set to the
tofmipd-authenticated UID, so tmda-inject then automagically
finds the appropriate configuration in ~/.tmda.

-Drew
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to