On Mon, Mar 08, 2004 at 09:20:15AM +0000, Marcus Williams wrote:
>On 06/03/2004, George Georgalis wrote:
>> my solution is to use one dot-qmail file and a wrapper for spamassassin
>> to provide proper qmail-command exit codes.
>
>You might want to change the way you create your tmp files to
>something safer (particularly if you're going to use this script as
>root or something) :)
>
>http://www.linuxsecurity.com/articles/documentation_article-8886.html

Thanks for the link, Marcus.

I actually new about mktemp (though not the problems on other
platforms...) but did it my lazy way because I intended to not even use
tmp files in the final version. unfortunately, never worked that method
out and should have fixed my insecure temp file method before posting!

Maybe a better way would just use the spam maildir/tmp/ directory and
safecat move to spam maildir/new/ or unlink if it was spam or not... is
there any problems with using mktemp filenames in maildir directories?

// George

-- 
George Georgalis, Architect and administrator, Linux services. IXOYE
http://www.galis.org/george cell:646-331-2027 mailto:[EMAIL PROTECTED]
Key fingerprint = 5415 2738 61CF 6AE1 E9A7  9EF0 0186 503B 9831 1631

_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to